ezsystems/ezpublish-kernel
packagist · Kernel used by ezsystems/ezplatform and derivatives. Provides the Content Repository, its APIs, and the application's Symfony framework integration. · Repository · Package
Security Advisories for ezsystems/ezpublish-kernel in packagist
High
over 1 year ago
eZ Platform Object Injection in SiteAccessMatchListener
packagist
ezsystems/ezpublish-kernel
High
over 1 year ago
eZ Publish Remote code execution in file uploads
packagist
ezsystems/ezpublish-kernel
Moderate
over 1 year ago
eZ Platform REST API returns list of all SiteAccesses
packagist
ezsystems/ezpublish-kernel
Low
almost 2 years ago
Download route allows filename change in eZpublish kernel
packagist
ezsystems/ezpublish-kernel
Moderate
over 2 years ago
User account enumeration in eZ Publish Ibexa Kernel
packagist
ezsystems/ezpublish-kernel
Moderate
over 2 years ago
Cross Site Scripting in eZ Platform Ibexa Kernel
packagist
ezsystems/ezplatform-kernel, ezsystems/ezpublish-kernel
Critical
over 2 years ago
Access control issue in ezsystems/ezpublish-kernel
packagist
ezsystems/ezpublish-kernel
High
over 2 years ago
Company admin role gives excessive privileges in eZ Platform Ibexa
packagist
ezsystems/ezplatform-kernel, ezsystems/ezpublish-kernel
Low
over 2 years ago
Timing attack in eZ Platform Ibexa
packagist
ezsystems/ezpublish-kernel, ezsystems/ezplatform-kernel
Critical
almost 3 years ago
eZ Platform users with the Company admin role can assign any role to any user
packagist
ezsystems/ezpublish-kernel
Critical
over 3 years ago
Login timing attack in ezsystems/ezpublish-kernel
packagist
ezsystems/ezpublish-kernel
Critical
over 3 years ago
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type
packagist
ezsystems/ezpublish-legacy, ezsystems/ezpublish-kernel
Critical
over 3 years ago
Object state limitation has no effect
packagist
ezsystems/ezpublish-kernel
Critical
over 3 years ago
Code injection in ezsystems/ezpublish-kernel
packagist
ezsystems/ezpublish-kernel
High
over 4 years ago
Cross-site scripting in eZ Platform Kernel
packagist
ezsystems/ezplatform-kernel, ezsystems/ezpublish-kernel
High
over 4 years ago
/user/sessions endpoint allows detecting valid accounts
packagist
ezsystems/ezpublish-kernel