Description
Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerating object IDs.
High · 7.5
CVE-2025-70363
EUVD-2025-208341GHSA-frjw-grrr-vrpr
Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access…
Published Mar 6, 2026 · Updated Jul 5, 2026 · Assigned by mitre