Packagist/ibexa/core: critical
Login timing attack in ibexa/core
Action: Upgrade ibexa/core to 4.0.7 or later.
composer require ibexa/core:4.0.7composer require ibexa/core:4.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.0.7 | - |
| 4.1.0 | 4.1.4 | - |
Fixed versions
| 4.0.7 | 4.1.4 |
Sources
- osv: GHSA-2x4v-g8cx-jxrq
- https://github.com/ibexa/core/security/advisories/GHSA-2x4v-g8cx-jxrq
- https://developers.ibexa.co/security-advisories/ibexa-sa-2022-006-vulnerabilities-in-page-builder-login-and-commerce
- https://github.com/ibexa/core
published · modified · JSON