Security advisories

high2024-05-15

eZ Platform Object Injection in SiteAccessMatchListener

GHSA-2w9p-xxqr-h253

medium2024-03-20

Ibexa Kernel's files with blacklisted extensions can be still saved to drafts

GHSA-mwvh-p3hx-x4gg

low2023-11-03

Ibexa ezplatform-kernel download route allows filename change

GHSA-gv2c-5g79-h73c

low2023-03-12

Timing attack in eZ Platform Ibexa

GHSA-66m4-gc8h-hpjx · CVE-2022-48366

critical2022-11-10

eZ Platform users with the Company admin role can assign any role to any user

GHSA-8h83-chh2-fchp

critical2022-06-02

Login timing attack in ezsystems/ezplatform-kernel

GHSA-342c-vcff-2ff2

critical2022-04-29

Object state limitation has no effect

GHSA-w8qp-hmh5-4v9v

medium2022-02-19

Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel

GHSA-x8xx-x82q-42q3 · CVE-2022-25336