5 matches found
CVE-2022-48367
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled...
9.8CVSS6.8AI score0.00721EPSS
SaveExploits0
CVE-2021-46876
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence...
5.3CVSS5.5AI score0.00507EPSS
SaveExploits0References2
Code injection
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence...
5CVSS5.2AI score0.00507EPSS
SaveExploits0References2Affected Software1
20