Skip to content
OpenAdvisories

Package · Packagist

ibexa/core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-g95c-xc83-8353

    Ibexa DXP Download route allows filename change

    ### Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which…

    ibexa/core Packagist