4 matches found
CVE-2022-48367
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled...
9.8CVSS6.8AI score0.00721EPSS
SaveExploits0
Code injection
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence...
5CVSS5.2AI score0.00507EPSS
SaveExploits0References2Affected Software1
20