EZSA-2018-008 REST API returns list of all SiteAccesses

More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-008-rest-api-returns-list-of-all-siteaccesses...

CVE-2005-4852

The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '' underscore, which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for...

CVE-2005-4852

The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '' underscore, which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for...