https://doc.ibexa.co/en/latest/infrastructure_and_maintenance/security/reporting_issues/
https://developers.ibexa.co/security-advisories
Security: ezsystems/ezpublish-kernel
Security
SECURITY.md
-
Users with the Company admin role can assign any role to any userGHSA-99r3-xmmq-7q7g published
Nov 10, 2022 by glyeCritical -
Download route allows filename changeGHSA-946c-f9w6-2c25 published
Nov 3, 2023 by glyeLow -
Object state limitation has no effectGHSA-5x4f-7xgq-r42x published
Apr 28, 2022 by glyeCritical -
IBX-1755: Login timing attackGHSA-xfqg-p48g-hh94 published
May 31, 2022 by glyeCritical -
IBX-1392: Image filenames sanitizationGHSA-44m4-9cjp-j587 published
Jan 18, 2022 by glyeHigh -
IBEXA-SA-2021-002: /user/sessions endpoint allows detecting valid accountsGHSA-gmrf-99gw-vvwj published
Mar 9, 2021 by glyeHigh -
IBEXA-SA-2021-003: Block upload of scriptable file typesGHSA-mrvj-7q4f-5p42 published
Mar 17, 2021 by glyeHigh
Learn more about advisories related to ezsystems/ezpublish-kernel in the GitHub Advisory Database