CVE-2022-48367
Published Mar 12, 2023An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.
Vendor/product archive
ibexa / digital_experience_platform CVEs
Beta · best-effort3 CVEs tagged to ibexa / digital_experience_platform — 1 Critical, 1 High, 0 Medium, 1 Low, 0 Unrated.
CVE-2022-48366
Published Mar 12, 2023An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.
CVE-2022-48365
Published Mar 12, 2023An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.
Showing 1-3 of 3 CVEsPage 1 of 1