Packagist/ezsystems/ezplatform-rest: high
/user/sessions endpoint allows detecting valid accounts
Action: Upgrade ezsystems/ezplatform-rest to 1.2.2.1 or later.
composer require ezsystems/ezplatform-rest:1.2.2.1composer require ezsystems/ezplatform-rest:1.3.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.2.2.1 | - |
| 1.3.0 | 1.3.1.1 | - |
Fixed versions
| 1.2.2.1 | 1.3.1.1 |
Sources
- osv: GHSA-7vwg-39h8-8qp8
- https://github.com/ezsystems/ezplatform-rest/security/advisories/GHSA-7vwg-39h8-8qp8
- https://github.com/ezsystems/ezplatform-rest/commit/e239bba8b154a3b4cf787e29b9f15edf8945d933
- https://packagist.org/packages/ezsystems/ezplatform-rest
published · modified · JSON