Skip to content
OpenAdvisories

Package · Packagist

ezsystems/ezplatform-kernel

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    GHSA-mwvh-p3hx-x4gg

    Ibexa Kernel's files with blacklisted extensions can be still saved to drafts

    ### Impact File validation can be configured to reject certain files by file type. When this happens, validation fails, and the content can't be published. However, the file can be saved when saving the content draft. This means unwanted files can be present …

    ezsystems/ezplatform-kernel Packagist
  • Medium 6.1
    CVE-2021-46875

    Cross-site scripting in eZ Platform Kernel

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.

    ezsystems/ezpublish-kernel ezsystems/ezplatform-kernel Packagist
  • Medium 5.3
    CVE-2022-25336

    Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel

    Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files because the image path and filename can be correctly deduced.

    ezsystems/ezplatform-kernel Packagist