Skip to content
OpenAdvisories

Package · Packagist

ezsystems/ezpublish-kernel

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High —
    GHSA-64vj-933f-6pm3

    eZ Platform Object Injection in SiteAccessMatchListener

    This Security Advisory is about an object injection vulnerability in the SiteAccessMatchListener of eZ Platform, which could lead to remote code execution (RCE), a very serious threat. All sites may be affected. Update: There are bugs introduced by this fix, …

    ezsystems/ezpublish-kernel Packagist
  • High —
    GHSA-3vwr-jj4f-h98x

    eZ Publish Remote code execution in file uploads

    This Security Advisory is about a vulnerability in the way eZ Platform and eZ Publish Legacy handles file uploads, which can in the worst case lead to remote code execution (RCE), a very serious threat. An attacker would need access to uploading files to be a…

    ezsystems/ezpublish-kernel Packagist
  • High 7.2
    CVE-2022-48365

    Company admin role gives excessive privileges in eZ Platform Ibexa

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.

    ezsystems/ezpublish-kernel ezsystems/ezplatform-kernel Packagist
  • High —
    GHSA-44m4-9cjp-j587

    IBX-1392: Image filenames sanitization

    ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files.

    ezsystems/ezpublish-kernel Packagist