Skip to content
OpenAdvisories

Package · Packagist

ezsystems/ezplatform-kernel

10 known vulnerabilities.

2 results · Clear filters · Feed

  • High —

    eZ Platform Object Injection in SiteAccessMatchListener

    This Security Advisory is about an object injection vulnerability in the SiteAccessMatchListener of eZ Platform, which could lead to remote code execution (RCE), a very serious threat. All sites may be affected. Update: There are bugs introduced by this fix, …

  • High 7.2

    Company admin role gives excessive privileges in eZ Platform Ibexa

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.