WS-2021-0372

An issue was found in the "ibexa/post-install" PHP package before 1.0.4.1. The default configuration for platform.sh .platform.app.yaml allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those...

PT-2021-24424

Name of the Vulnerable Software and Affected Versions: platform.sh affected versions not specified Description: The default configuration of platform.sh, as defined in .platform.app.yaml, allows unauthorized access to uploaded files if their location is known or guessed, regardless of the content...