pkg:Packagist/ezsystems/ezpublish-kernel

All known vulnerabilities

• CRITICAL9.8CVE-2022-48367Access control issue in ezsystems/ezpublish-kernel
  >= 7.5.0, < 7.5.28
• CRITICAL9.8CVE-2020-10806eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type
  from 0, < 5.4.14.1
• CRITICAL9.8CVE-2022-25337Code injection in ezsystems/ezpublish-kernel
  >= 7.5.0, < 7.5.26
• HIGH7.2Company admin role gives excessive privileges in eZ Platform Ibexa
  >= 7.5.0, < 7.5.30
• HIGH7.2Company admin role gives excessive privileges in eZ Platform Ibexa
  >= 7.5.0, < 7.5.30
• MEDIUM5.3/user/sessions endpoint allows detecting valid accounts
  >= 6.13.0, < 6.13.8.1
• MEDIUM5.3/user/sessions endpoint allows detecting valid accounts
  >= 6.13.0, < 6.13.8.1
• LOW3.7Login timing attack in ezsystems/ezpublish-kernel
  >= 7.5.0, < 7.5.29
• LOW3.7Login timing attack in ezsystems/ezpublish-kernel
  >= 7.5.0, < 7.5.29
• —Cross-site scripting in eZ Platform Kernel
  from 0, < 6.13.8.2