Description
Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | ezsystems/ezpublish-kernel | >= 7.5.0, < 7.5.26 | 7.5.26 | GHSA-xwv6-v7qx-f5jc |