Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

ezsystems/ezpublish-kernel

7 known vulnerabilities (1 critical, 1 high, 2 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 1 critical, 1 high, 2 medium, 1 low
Registry
Packagist

Advisories 7

  • CVE-2022-48367Critical 9.8

    An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28.

    Affected: from 7.5.0, fixed in 7.5.28.

  • An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.

    Affected: from 7.5.0, fixed in 7.5.29.

  • An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.

    Affected: from 7.5.0, fixed in 7.5.30.

  • CVE-2021-46876Medium 5.3

    An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1.

    Affected: from 6.13.0, fixed in 6.13.8.1; from 7.5.0, fixed in 7.5.15.1.

  • CVE-2021-46875Medium 6.1

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1.

    Affected: fixed in 6.13.8.2; from 7.0.0, fixed in 7.5.15.2.

  • Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.

    Affected: from 7.5.0, fixed in 7.5.26.

  • eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before…

    Affected: fixed in 5.4.14.1; from 6.0, fixed in 6.13.6.2; from 7.0, fixed in 7.5.6.2.