GitHub Advisoryadvisory · Packagist

GHSA-54p5-gxq6-j98g eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type

CRITICAL Published 2022-05-24 Modified 2024-04-25 Official page ↗
Aliases
CVE-2020-10806
Ecosystem
Packagist
Packages
ezsystems/ezpublish-kernel, ezsystems/ezpublish-legacy
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reviewed
2024-04-25

Affected packages

• Packagist ezsystems/ezpublish-kernel: < 5.4.14.1 → fixed in 5.4.14.1 • Packagist ezsystems/ezpublish-legacy: < 5.4.14.1 → fixed in 5.4.14.1 • Packagist ezsystems/ezpublish-kernel: >= 6.0, < 6.13.6.2 → fixed in 6.13.6.2 • Packagist ezsystems/ezpublish-kernel: >= 7.0, < 7.5.6.2 → fixed in 7.5.6.2 • Packagist ezsystems/ezpublish-legacy: >= 2017, < 2017.12.7.2 → fixed in 2017.12.7.2 • Packagist ezsystems/ezpublish-legacy: >= 2019, < 2019.03.4.2 → fixed in 2019.03.4.2

Description

eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.

Related

Alias · CVE (1)

  • CVE-2020-10806 eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before… vulnerability

References