GitHub Advisoryadvisory · Packagist
GHSA-44m4-9cjp-j587 IBX-1392: Image filenames sanitization
HIGH
Official page ↗
- Ecosystem
- Packagist
- Packages
- ezsystems/ezpublish-kernel
- Severity
- High
- Reviewed
- 2022-01-19
Affected packages
• Packagist ezsystems/ezpublish-kernel: >= 7.5.0, < 7.5.26 → fixed in 7.5.26
Description
ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files.
References
- https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-44m4-9cjp-j587 web
- https://developers.ibexa.co/security-advisories/ibexa-sa-2022-001-image-filenames-sanitization web
- https://github.com/ezsystems/ezpublish-kernel web
- https://github.com/ezsystems/ezpublish-kernel/releases/tag/v7.5.26 web