CVEvulnerability
CVE-2005-4850
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.
Affected configurations
• ez ez publish (>= 3.5.0 <= 3.7)
Related
Weakness · not in database (1)
References
- http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 Patch, Vendor Advisory
- http://issues.ez.no/6680 Broken Link
- http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 Patch, Vendor Advisory
- http://issues.ez.no/6680 Broken Link