ezsystems/ezpublish-kernel vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-64VJ-933F-6PM3Highezsystems/ezpublish-kernel: eZ Platform Object Injection in SiteAccessMatchListener GHSA-3VWR-JJ4F-H98XHighezsystems/ezpublish-kernel: eZ Publish Remote code execution in file uploads GHSA-9WWX-C723-VM8XMediumezsystems/ezpublish-kernel: eZ Platform REST API returns list of all SiteAccesses GHSA-946C-F9W6-2C25Lowezsystems/ezpublish-kernel: Download route allows filename change in eZpublish kernel CVE-2022-48365Highezsystems/ezpublish-kernel: Company admin role gives excessive privileges in eZ Platform Ibexa CVE-2022-48367Criticalezsystems/ezpublish-kernel: Access control issue in ezsystems/ezpublish-kernel CVE-2022-48366Lowezsystems/ezplatform-kernel: Timing attack in eZ Platform Ibexa GHSA-99R3-XMMQ-7Q7GCriticalezsystems/ezpublish-kernel: eZ Platform users with the Company admin role can assign any role to any user GHSA-XFQG-P48G-HH94Criticalezsystems/ezpublish-kernel: Login timing attack in ezsystems/ezpublish-kernel CVE-2020-10806Criticalezsystems/ezpublish-kernel: eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type GHSA-5X4F-7XGQ-R42XCriticalezsystems/ezpublish-kernel: Object state limitation has no effect CVE-2022-25337Criticalezsystems/ezpublish-kernel: Code injection in ezsystems/ezpublish-kernel GHSA-44M4-9CJP-J587Highezsystems/ezpublish-kernel: IBX-1392: Image filenames sanitization CVE-2021-46875Highezsystems/ezpublish-kernel: Cross-site scripting in eZ Platform Kernel CVE-2021-46876Mediumezsystems/ezpublish-kernel: /user/sessions endpoint allows detecting valid accounts

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo