Lucene search
Veracode Vulnerability DatabaseVERACODE:47035HistoryMay 20, 2024 - 5:54 a.m.
Information Disclosure
2024-05-2005:54:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
ezpublish-legacy
information disclosure
access permissions
content tree menu
hidden items
unauthorized users
backend url
software
6.9 Medium
AI Score
Confidence
High
ezsystems/ezpublish-legacy is vulnerable to Information Disclosure. The vulnerability is caused due to the module not properly checking access permissions when rendering the content tree menu. This allows the tree menu to display hidden items to unauthorized users if they access the backend URL directly.
6.9 Medium
AI Score
Confidence
High