Description
The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.
Unscored
CVE-2007-4494
EUVD-2007-4477GHSA-hm88-4c8q-7h3p
The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote att…
Published Aug 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre