CVE-2022-48365

The CVE-2022-48365 issue affects eZ Platform Ibexa Kernel before 1.3.26, where the Company admin role grants excessive privileges. Impact includes elevated access to perform actions that should be restricted. The vulnerability is rooted in improper privilege management for the admin role, allowin...

CVE-2022-48366

CVE-2022-48366 affects eZ Platform Ibexa Kernel prior to 1.3.19, enabling an attacker to determine whether an account exists via a timing attack (remote, no auth, no user interaction). The CVSS v3.1 vector indicates network access, high attack complexity, and no privileges required, with a low co...

CVE-2025-70363

The Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x is vulnerable to an incorrect access control flaw in its REST API . This security weakness allows unauthenticated attackers to access sensitive data by enumerating object IDs . No specific remediation or newer version containing a fix is cu...