Skip to content
OpenAdvisories

Vendor

ezsystems

1 known vulnerabilities.

Products

ezplatform-graphql 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-41876 Public exploit

    ezplatform-graphql GraphQL queries can expose password hashes

    ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject to Insecure Storage of Sensitive Information. Unauthenticated GraphQL queries for user accounts can expose password hash…

    ezsystems ezplatform-graphql ezsystems/ezplatform-graphql Packagist