Security advisories

medium2024-05-15

Ez Platform Object Injection in legacy shop module

ezsystems/ezpublish-legacy · GHSA-39j2-4p9j-5w4j

high2024-05-15

EZsystems Remote code execution in file uploads

ezsystems/ezpublish-legacy · GHSA-9895-26wr-4fgv

high2024-05-15

CVE-2023-40297-Stakater Forecastle has a directory traversal vulnerability

stakater/forecastle · GHSA-x8xm-wrjq-5g54

medium2024-05-15

Ez Platform and Legacy are prone to an insecure interpretation of PHP/PHAR uploads

ezsystems/ezpublish-legacy · GHSA-pqjm-xcp8-wgmm

high2024-05-15

eZ Publish Legacy Passwordless login for LDAP users

ezsystems/ezpublish-legacy · GHSA-p9mp-vq4v-v5m5

medium2024-05-15

eZ Publish Legacy Cross-site Scripting (XSS) in 'disabled module' error template

ezsystems/ezpublish-legacy · GHSA-2vh3-cj9j-mcj5

high2024-05-15

eZ Platform Object Injection in SiteAccessMatchListener

ezsystems/ezpublish-kernel · GHSA-64vj-933f-6pm3

high2024-05-15

eZ Publish Legacy Patch EZSA-2018-001 for Several vulnerabilities

ezsystems/ezpublish-legacy · GHSA-82rv-45pc-v28w

high2024-05-15

eZ Publish Information disclosure in backend content tree menu

ezsystems/ezpublish-legacy · GHSA-cc2j-92jq-wgjg

high2024-05-15

eZ Publish Remote code execution in file uploads

ezsystems/ezpublish-kernel · GHSA-3vwr-jj4f-h98x

medium2024-05-15

eZ Platform Prevent accepting app.php in URL in Platform.sh

ezsystems/ezplatform · GHSA-qhjc-hg94-245v

medium2024-05-15

eZ Platform REST API returns list of all SiteAccesses

ezsystems/ezpublish-kernel · GHSA-9wwx-c723-vm8x

medium2024-05-15

eZ Platform Rules to disable executable access are ignored on Platform.sh (eZ Cloud)

ezsystems/ezplatform · GHSA-6xch-2vxx-5pvr

high2024-05-15

eZ Platform CSRF token in login form is disabled by default

ezsystems/ezplatform · GHSA-45qm-j4m9-whv9

high2024-05-15

eZ Platform Admin UI Password reset vulnerability

ezsystems/ezplatform-user · GHSA-hfpp-2vhw-qq43

high2024-05-15

eZ Platform Object Injection in SiteAccessMatchListener

ezsystems/ezplatform-kernel · GHSA-2w9p-xxqr-h253

high2024-05-15

eZ Platform Admin UI Cross-site Scripting vulnerability

ezsystems/ezplatform-admin-ui · GHSA-q73v-79x3-jv2w

high2024-05-15

eZ Platform Password reset vulnerability

ezsystems/ezplatform-admin-ui · GHSA-cg84-55jx-4237

medium2024-05-15

eZ Platform Editor Cross-site Scripting (XSS)

ezsystems/ezplatform-admin-ui-assets · GHSA-4c2w-v5rq-5mx7

medium2024-05-15

eZ Platform Bundled jQuery affected by CVE-2019-11358

ezsystems/ezplatform-admin-ui-assets · GHSA-jrpw-8884-2747