Skip to content
OpenAdvisories

Product · ibexa

user

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2025-67719

    Ibexa User Bundle is missing password change validation

    Ibexa is a composable end-to-end DXP (Digital Experience Platform). Versions 5.0.0-beta1 through 5.0.3 do not have password validation. During the transition from v4 to v5 an error was introduced into validation code which causes the validation of the previou…

    ibexa user ibexa/user Packagist