Executive brief
Ibexa ezplatform-kernel download route allows filename change
Affected products
- Packagist ezsystems/ezplatform-kernel
Junglewise Threat Intelligence
Ibexa ezplatform-kernel download route allows filename change
Severity: info ยท Published 2023-11-03
Technologies: ezsystems/ezplatform-kernel (Packagist). Vendors: Packagist.
Related threats
- eZ Platform Object Injection in SiteAccessMatchListener
- Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
- Timing attack in eZ Platform Ibexa
- Company admin role gives excessive privileges in eZ Platform Ibexa
- eZ Platform users with the Company admin role can assign any role to any user