Skip to content
OpenAdvisories

Package · Packagist

ezsystems/ezplatform-kernel

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low —
    GHSA-gv2c-5g79-h73c

    Ibexa ezplatform-kernel download route allows filename change

    ### Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which…

    ezsystems/ezplatform-kernel Packagist
  • Low 3.7
    CVE-2022-48366

    Timing attack in eZ Platform Ibexa

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.

    ezsystems/ezpublish-kernel ezsystems/ezplatform-kernel Packagist