Packagist/ezsystems/ezplatform: high
Any storage file can be downloaded from p.sh if full server path is known
Action: Upgrade ezsystems/ezplatform to 1.13.6.1 or later.
composer require ezsystems/ezplatform:2.5.24.1composer require ezsystems/ezplatform:1.13.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.5.24.1 | - |
| 0 | 1.13.6.1 | - |
Fixed versions
| 2.5.24.1 | 1.13.6.1 |
Sources
- osv: GHSA-2rh5-jvgx-pgw3
- https://github.com/ezsystems/ezplatform/security/advisories/GHSA-2rh5-jvgx-pgw3
- https://developers.ibexa.co/security-advisories/ibexa-sa-2021-006-storage-and-legacy-files-accessible-if-path-is-known
- https://github.com/ezsystems/ezplatform
published · modified · JSON