Skip to content
OpenAdvisories

Product · ibexa

admin-ui

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-53864

    Cross-site Scripting in a field that is used in the Content name pattern in ibexa/admin-ui

    Ibexa Admin UI Bundle is all the necessary parts to run the Ibexa DXP Back Office interface. The Content name pattern is used to build Content names from one or more fields. An XSS vulnerability has been found in this mechanism. Content edit permission is req…

    ibexa admin-ui ibexa/admin-ui Packagist
  • Medium 5.4
    CVE-2024-39318

    Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget

    The Ibexa Admin UI Bundle contains all the necessary parts to run the Ibexa DXP Back Office interface. The file upload widget is vulnerable to XSS payloads in filenames. Access permission to upload files is required. As such, in most cases only authenticated …

    ibexa admin-ui ibexa/admin-ui Packagist