Packagist/ezsystems/ezplatform-kernel: high
eZ Platform Object Injection in SiteAccessMatchListener
Action: Upgrade ezsystems/ezplatform-kernel to 1.0.3 or later.
composer require ezsystems/ezplatform-kernel:1.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.3 | - |
Fixed versions
| 1.0.3 |
Sources
- osv: GHSA-2w9p-xxqr-h253
- https://ezplatform.com/security-advisories/ezsa-2020-004-object-injection-in-siteaccessmatchlistener
- https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezplatform-kernel/2020-05-20-1.yaml
- https://github.com/ezsystems/ezplatform-kernel
- https://web.archive.org/web/20201024030303/https://ezplatform.com/security-advisories/ezsa-2020-004-object-injection-in-siteaccessmatchlistener
published · modified · JSON