CVE-2006-7218

2022-10-0316:21:25

mitre

www.cve.org

ez publish

security

unauthorized edits

cve-2006-7218

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.8%

JSON

eZ publish before 3.8.1 does not properly enforce permissions for “content edit Language” when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy.