Skip to content
OpenAdvisories

Package · Packagist

ibexa/post-install

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-gqcf-83rq-gpfr

    Any storage file can be downloaded from p.sh if full server path is known

    The default configuration for platform.sh (.platform.app.yaml) allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those files. If you're using Legacy Bridge,…

    ibexa/post-install Packagist