CVEvulnerability

CVE-2005-4853

9.4 HIGH Published 2005-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.4 HIGH — AV:N/AC:L/Au:N/C:N/I:C/A:C
Weaknesses: CWE-264

Description

The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings.

Affected configurations

• ez ez publish 3.5.0 • ez ez publish 3.5.1 • ez ez publish 3.5.2 • ez ez publish 3.5.3 • ez ez publish 3.5.4

Weakness · not in database (1)

CWE-264

References

http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 ez.no
http://issues.ez.no/7052 issues.ez.no
http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 ez.no
http://issues.ez.no/7052 issues.ez.no

CVE-2005-4853

Description

Affected configurations

Related

Weakness · not in database (1)

References