44 matches found
CVE-2022-48365
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges...
Code injection
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack...
Code injection
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges...
Code injection
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence...
Ez Systems eZ Platform 安全漏洞
Ez Systems eZ Platform is a content management system CMS based on the Symfony framework from Ez Systems, Norway. A security vulnerability exists in eZ Publish Ibexa Kernel versions prior to 7.5.28, which stems from improper handling of access control...
CVE-2021-46875
CVE-2021-46875 affects eZ Platform Ibexa Kernel prior to 1.3.1.1. Multiple sources (NVD, Red Hat, CVE listing) describe a Cross-Site Scripting (XSS) vulnerability where JavaScript can be uploaded in .html or .js files, enabling script execution when victims access the uploaded content. The core i...
CVE-2022-48367
An issue in eZ Publish Ibexa Kernel prior to 7.5.28 permits improper access control based on object state, leading to potential unauthorized access. CVSS v3.1 base score 9.8 (CRITICAL); attack vector NETWORK, no user interaction. A remediation is to upgrade to 7.5.28 or later per the associated a...
CVE-2022-48365
The CVE-2022-48365 issue affects eZ Platform Ibexa Kernel before 1.3.26, where the Company admin role grants excessive privileges. Impact includes elevated access to perform actions that should be restricted. The vulnerability is rooted in improper privilege management for the admin role, allowin...
CVE-2022-48366
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack...
CVE-2022-48365
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges...
CVE-2022-48366
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack...
CVE-2022-48367
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled...
CVE-2022-48365
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges...
Ez Systems eZ Platform 安全漏洞
Ez Systems eZ Platform is a content management system CMS based on the Symfony framework from Ez Systems, Norway. Ibexa Kernel eZ Platform A security vulnerability exists in Ibexa Kernel versions prior to 1.3.26, which stems from granting too many privileges to the corporate administrator role...
CVE-2021-46875
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file...
CVE-2021-46876
Affected product: eZ Publish Ibexa Kernel prior to 7.5.15.1. Vulnerability: the /user/sessions endpoint can be abused to determine whether a given username or email corresponds to a valid account, enabling information disclosure. Underlying cause: listed in CVE description as an account-existence...
CVE-2021-46876
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence...
Ez Systems eZ Platform 竞争条件问题漏洞
Ez Systems eZ Platform is a content management system CMS based on the Symfony framework from Ez Systems, Norway. A security vulnerability exists in Ez Systems eZ Platform Ibexa Kernel versions prior to 1.3.19. An attacker could exploit the vulnerability to determine the existence of an account v...
Ez Systems eZ Platform 跨站脚本漏洞
Ez Systems eZ Platform is a content management system CMS based on the Symfony framework from Ez Systems, Norway. A security vulnerability exists in eZ Platform Ibexa Kernel versions prior to 1.3.1.1, which stems from JavaScript code that can be uploaded in .html or .js files...