High
ghsa-9895-26wr-4fgv
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
High
ghsa-64vj-933f-6pm3
eZ Platform Object Injection in SiteAccessMatchListener
High
ghsa-3vwr-jj4f-h98x
eZ Publish Remote code execution in file uploads
Medium
ghsa-9wwx-c723-vm8x
eZ Platform REST API returns list of all SiteAccesses
High
ghsa-2w9p-xxqr-h253
eZ Platform Object Injection in SiteAccessMatchListener
Low
ghsa-gv2c-5g79-h73c
Ibexa ezplatform-kernel download route allows filename change
Low
ghsa-g95c-xc83-8353
Ibexa DXP Download route allows filename change
Low
ghsa-946c-f9w6-2c25
Download route allows filename change in eZpublish kernel
High
CVE-2022-48365
Company admin role gives excessive privileges in eZ Platform Ibexa
Low
CVE-2022-48366
Timing attack in eZ Platform Ibexa
Critical
ghsa-99r3-xmmq-7q7g
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-xfqg-p48g-hh94
Login timing attack in ezsystems/ezpublish-kernel
Critical
CVE-2020-10806
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type
Critical
CVE-2022-48367
Access control issue in ezsystems/ezpublish-kernel
Critical
CVE-2022-25337
Code injection in ezsystems/ezpublish-kernel
High
ghsa-44m4-9cjp-j587
IBX-1392: Image filenames sanitization
High
CVE-2021-46875
Cross-site scripting in eZ Platform Kernel
Medium
CVE-2021-46876
/user/sessions endpoint allows detecting valid accounts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.