Lucene search

Code injection in ezsystems/ezpublish-kernel

🗓️ 19 Feb 2022 00:25:01Reported by GitHub Advisory DatabaseType

Code injection risk in ezsystems/ezpublish-kernel due to uncontrolled image acces

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2022-25337	18 Feb 202218:15	–	nvd
OSV	Code injection in ezsystems/ezpublish-kernel	19 Feb 202200:01	–	osv
Prion	Design/Logic Flaw	18 Feb 202218:15	–	prion
Cvelist	CVE-2022-25337	18 Feb 202217:48	–	cvelist
CVE	CVE-2022-25337	18 Feb 202218:15	–	cve

Vulners

Node

ezsystems ezpublish\-kernelRange7.5.0–7.5.26

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25337
developers	www.developers.ibexa.co/security-advisories/ibexa-sa-2022-001-image-filenames-sanitization
github	www.github.com/advisories/GHSA-xwv6-v7qx-f5jc

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Feb 2022 00:01Current

3.8Low risk

Vulners AI Score3.8

CVSS26.8

CVSS39.8

EPSS0.00233

CWE-74