ezsystems/ezplatform-kernel vulnerabilities (Packagist)

10 vulnerabilities.

• ezsystems/ezplatform-kernel Packagist eZ Platform Object Injection in SiteAccessMatchListener GHSA-2w9p-xxqr-h253 Fix available No scoreMay 15, 2024
• ezsystems/ezplatform-kernel Packagist Ibexa Kernel's files with blacklisted extensions can be still saved to drafts GHSA-mwvh-p3hx-x4gg Fix available No scoreMarch 20, 2024
• ezsystems/ezplatform-kernel Packagist Ibexa ezplatform-kernel download route allows filename change GHSA-gv2c-5g79-h73c Fix available No scoreNovember 3, 2023
• ezsystems/ezplatform-kernel Packagist Timing attack in eZ Platform Ibexa CVE-2022-48366 Fix available 3.7 LowMarch 12, 2023
• ezsystems/ezplatform-kernel Packagist Company admin role gives excessive privileges in eZ Platform Ibexa CVE-2022-48365 Fix available 7.2 HighMarch 12, 2023
• ezsystems/ezplatform-kernel Packagist eZ Platform users with the Company admin role can assign any role to any user GHSA-8h83-chh2-fchp Fix available No scoreNovember 10, 2022
• ezsystems/ezplatform-kernel Packagist Login timing attack in ezsystems/ezplatform-kernel GHSA-342c-vcff-2ff2 Fix available No scoreJune 2, 2022
• ezsystems/ezplatform-kernel Packagist Object state limitation has no effect GHSA-w8qp-hmh5-4v9v Fix available No scoreApril 29, 2022
• ezsystems/ezplatform-kernel Packagist Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel CVE-2022-25336 Fix available 5.3 MediumFebruary 18, 2022
• ezsystems/ezplatform-kernel Packagist Duplicate Advisory: Cross Site Scripting in eZ Platform Ibexa Kernel CVE-2021-46875 Fix available 6.1 MediumMarch 19, 2021