Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2024/03/20 6:14 p.m.•30 views

Ibexa Kernel's files with blacklisted extensions can be still saved to drafts

Impact File validation can be configured to reject certain files by file type. When this happens, validation fails, and the content can't be published. However, the file can be saved when saving the content draft. This means unwanted files can be present in storage, even if they are not easily...

7AI score
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/03/20 6:13 p.m.•13 views

GHSA-MWVH-P3HX-X4GG Ibexa Kernel's files with blacklisted extensions can be still saved to drafts

Impact File validation can be configured to reject certain files by file type. When this happens, validation fails, and the content can't be published. However, the file can be saved when saving the content draft. This means unwanted files can be present in storage, even if they are not easily...

7AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/03/20 6:13 p.m.•19 views

Ibexa Kernel's files with blacklisted extensions can be still saved to drafts

Impact File validation can be configured to reject certain files by file type. When this happens, validation fails, and the content can't be published. However, the file can be saved when saving the content draft. This means unwanted files can be present in storage, even if they are not easily...

7AI score
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/20 12:00 a.m.•3 views

PT-2024-40225

Name of the Vulnerable Software and Affected Versions: ibexa core affected versions not specified Description: The issue allows unwanted file types to be stored even if they are not easily accessible due to the content not being published. This occurs when file validation is configured to reject...

5.7AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/03/20 12:00 a.m.•3 views

PT-2024-40383

Name of the Vulnerable Software and Affected Versions ezplatform-kernel affected versions not specified Description The issue allows unwanted file types to be stored even if they are not easily accessible due to the content not being published. This occurs when file validation is configured to...

5.7AI score
SaveExploits0References5
Rows per page
Query Builder