Skip to content
OpenAdvisories

Package · Packagist

ezsystems/ezpublish-kernel

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low —
    GHSA-946c-f9w6-2c25

    Download route allows filename change in eZpublish kernel

    ### Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which…

    ezsystems/ezpublish-kernel Packagist
  • Low 3.7
    CVE-2022-48366

    Timing attack in eZ Platform Ibexa

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.

    ezsystems/ezpublish-kernel ezsystems/ezplatform-kernel Packagist