GHSA-44m4-9cjp-j587
Suggest an improvement- Source
- https://github.com/advisories/GHSA-44m4-9cjp-j587
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/01/GHSA-44m4-9cjp-j587/GHSA-44m4-9cjp-j587.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-44m4-9cjp-j587
- Published
- 2022-01-21T23:24:14Z
- Modified
- 2024-12-04T05:41:06.113508Z
- Summary
- IBX-1392: Image filenames sanitization
- Details
-
ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files.
- Database specific
{ "github_reviewed": true, "nvd_published_at": null, "cwe_ids": [], "github_reviewed_at": "2022-01-19T16:14:58Z", "severity": "HIGH" }- References
Affected packages
Packagist / ezsystems/ezpublish-kernel
Package
- Name
- ezsystems/ezpublish-kernel
- Purl
- pkg:composer/ezsystems/ezpublish-kernel