Skip to content
OpenAdvisories

Archive

3 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /3 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    GHSA-gv2c-5g79-h73c

    Ibexa ezplatform-kernel download route allows filename change

    ### Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which…

    ezsystems/ezplatform-kernel Packagist
  • Low —
    GHSA-g95c-xc83-8353

    Ibexa DXP Download route allows filename change

    ### Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which…

    ibexa/core Packagist
  • Low —
    GHSA-946c-f9w6-2c25

    Download route allows filename change in eZpublish kernel

    ### Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which…

    ezsystems/ezpublish-kernel Packagist