Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-4850
cve-2005-4850
ez publish
remote attackers
data submission
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.9%
eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.
Affected configurations
Node
ezez_publishRange3.5.0–3.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| ez:ez_publish | ez ez publish | le | 3.7 |
Related
cvelist
cvelist
CVE-2005-4850
2022-10-03 16:22:44
ubuntucve
ubuntucve
CVE-2005-4850
2005-12-31 00:00:00
nvd
nvd
CVE-2005-4850
2005-12-31 05:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.9%
Related for CVE-2005-4850