CVE-2022-25336

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference IDOR attacks against image files because the image path and filename can be correctly deduced...

Ibexa Dxp 注入漏洞

Ibexa Dxp is a single technology stack digital experience platform from Ibexa Norway. Used to help B2B companies transform traditional sales strategies into frictionless buying experiences. A security vulnerability exists in Ibexa Dxp, which originated in Ibexa DXP ezsystems/ezpublish-kernel...

GHSA-44M4-9CJP-J587 IBX-1392: Image filenames sanitization

ezsystems/ezpublish-kernel versions 7.5. before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files...