Skip to content
OpenAdvisories

Package · Packagist

ezsystems/repository-forms

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical —
    GHSA-446q-xxg5-3vhh

    eZ Platform users with the Company admin role can assign any role to any user

    Critical severity. Users with the Company admin role (introduced by the company account feature in v4) can assign any role to any user. This also applies to any other user that has the role / assign policy. Any subtree limitation in place does not have any ef…

    ezsystems/repository-forms Packagist