CVE-2007-4493

CVE-2007-4493 affects eZ Publish prior to 3.8.9 and prior to 3.9.3; it arises from improper permission checks on module views that lack a policy function, with unknown impact and attack vectors, demonstrated by a discount vulnerability in the shop module. Remediation exists in the referenced upgr...