Ez Platform Kernel Security Vulnerabilities and Issues — Ez Platform Kernel CVE List

Lucene search

IbexaEz Platform Kernel

5 matches found

CVE•added 2023/03/12 5:15 a.m.•74 views

CVE-2022-48367

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.

9.8CVSS9.4AI score0.00196EPSS

CVE•added 2023/03/12 5:15 a.m.•60 views

CVE-2022-48366

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.

3.7CVSS4AI score0.00165EPSS

CVE•added 2023/03/12 5:15 a.m.•52 views

CVE-2021-46876

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence.

5.3CVSS5.2AI score0.00186EPSS

CVE•added 2023/03/12 5:15 a.m.•52 views

CVE-2022-48365

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.

7.2CVSS6.9AI score0.00143EPSS

CVE•added 2023/03/12 5:15 a.m.•50 views

CVE-2021-46875

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.

6.1CVSS6AI score0.00385EPSS