ezsystems/ezpublish-kernel vulnerabilities (Packagist)
14 vulnerabilities.
ezsystems/ezpublish-kernelPackagisteZ Platform Object Injection in SiteAccessMatchListenerNo scoreezsystems/ezpublish-kernelPackagisteZ Publish Remote code execution in file uploadsNo scoreezsystems/ezpublish-kernelPackagisteZ Platform REST API returns list of all SiteAccessesNo scoreezsystems/ezpublish-kernelPackagistDownload route allows filename change in eZpublish kernelNo scoreezsystems/ezpublish-kernelPackagistTiming attack in eZ Platform Ibexa3.7 Lowezsystems/ezpublish-kernelPackagistCompany admin role gives excessive privileges in eZ Platform Ibexa7.2 Highezsystems/ezpublish-kernelPackagisteZ Platform users with the Company admin role can assign any role to any userNo scoreezsystems/ezpublish-kernelPackagistLogin timing attack in ezsystems/ezpublish-kernelNo scoreezsystems/ezpublish-kernelPackagistObject state limitation has no effect9.8 Criticalezsystems/ezpublish-kernelPackagistCode injection in ezsystems/ezpublish-kernel9.8 Criticalezsystems/ezpublish-kernelPackagistIBX-1392: Image filenames sanitizationNo scoreezsystems/ezpublish-kernelPackagistDuplicate Advisory: Cross Site Scripting in eZ Platform Ibexa Kernel6.1 Mediumezsystems/ezpublish-kernelPackagistDuplicate Advisory: User account enumeration in eZ Publish Ibexa Kernel5.3 Mediumezsystems/ezpublish-kernelPackagisteZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type9.8 Critical