ezsystems/ezpublish-kernel · Security
IBX-1392: Image filenames sanitization
- GHSA ID
- GHSA-44m4-9cjp-j587
- Severity
- high
- Published
- Updated
Description
ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files.
References
- https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-44m4-9cjp-j587 ↗
- https://developers.ibexa.co/security-advisories/ibexa-sa-2022-001-image-filenames-sanitization ↗
- https://github.com/ezsystems/ezpublish-kernel/releases/tag/v7.5.26 ↗
- https://github.com/advisories/GHSA-44m4-9cjp-j587 ↗