WS-2021-0372

An issue was found in the "ibexa/post-install" PHP package before 1.0.4.1. The default configuration for platform.sh .platform.app.yaml allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those...

WS-2021-0373

An issue was found in the "ezsystems/ezplatform" PHP package before 2.5.24.1 and 1.13.6.1. The default configuration for platform.sh .platform.app.yaml allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content...

SUSE CVE-2012-5634

Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt...

Any storage file can be downloaded from p.sh if full server path is known

The default configuration for platform.sh .platform.app.yaml allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those files. If you're using Legacy Bridge, the default configuration also allows...

GHSA-GQCF-83RQ-GPFR Any storage file can be downloaded from p.sh if full server path is known

The default configuration for platform.sh .platform.app.yaml allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those files. If you're using Legacy Bridge, the default configuration also allows...

Any storage file can be downloaded from p.sh if full server path is known

The default configuration for platform.sh .platform.app.yaml allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those files. If you're using Legacy Bridge, the default configuration also allows...

PT-2021-24371

Name of the Vulnerable Software and Affected Versions: platform.sh affected versions not specified Description: The default configuration of platform.sh allows unauthorized access to uploaded files if their location is known or guessed, regardless of content read access permissions. Additionally,...

PT-2021-24424

Name of the Vulnerable Software and Affected Versions: platform.sh affected versions not specified Description: The default configuration of platform.sh, as defined in .platform.app.yaml, allows unauthorized access to uploaded files if their location is known or guessed, regardless of the content...