Executive brief
eZ Platform Object Injection in SiteAccessMatchListener
Affected products
- Packagist ezsystems/ezplatform-kernel
Junglewise Threat Intelligence
eZ Platform Object Injection in SiteAccessMatchListener
Severity: info ยท Published 2024-05-15
Technologies: ezsystems/ezplatform-kernel (Packagist). Vendors: Packagist.
Related threats
- Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
- Ibexa ezplatform-kernel download route allows filename change
- Timing attack in eZ Platform Ibexa
- Company admin role gives excessive privileges in eZ Platform Ibexa
- eZ Platform users with the Company admin role can assign any role to any user