Skip to content
OpenAdvisories

Package · Packagist

ibexa/post-install

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-4h8f-c635-25p7

    ibexa/post-install affected by Breach with Varnish VCL

    ### Impact This is not a vulnerability in the code per se, but included platform.sh Varnish VCL templates and Apache/Nginx vhost templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP co…

    ibexa/post-install Packagist
  • High —
    GHSA-gqcf-83rq-gpfr

    Any storage file can be downloaded from p.sh if full server path is known

    The default configuration for platform.sh (.platform.app.yaml) allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those files. If you're using Legacy Bridge,…

    ibexa/post-install Packagist