Skip to content
OpenAdvisories

Package · Packagist

ezsystems/ezpublish-kernel

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    GHSA-9wwx-c723-vm8x

    eZ Platform REST API returns list of all SiteAccesses

    This security advisory fixes a vulnerability in eZ Platform, and we recommend that you install it as soon as possible. The issue is that the REST API may be made to disclose the names of all available site accesses. The severity of this depends on your instal…

    ezsystems/ezpublish-kernel Packagist
  • Medium 6.1
    CVE-2021-46875

    Cross-site scripting in eZ Platform Kernel

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.

    ezsystems/ezpublish-kernel ezsystems/ezplatform-kernel Packagist
  • Medium 5.3
    CVE-2021-46876

    /user/sessions endpoint allows detecting valid accounts

    An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence.

    ezsystems/ezpublish-kernel Packagist