Packagist/ezsystems/ezpublish-legacy: high
eZ Publish Legacy Patch EZSA-2018-001 for Several vulnerabilities
Action: Upgrade ezsystems/ezpublish-legacy to 5.3.12.3 or later.
composer require ezsystems/ezpublish-legacy:2017.12.2.1composer require ezsystems/ezpublish-legacy:5.4.11.3composer require ezsystems/ezpublish-legacy:5.3.12.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2011.0.0 | 2017.12.2.1 | - |
| 5.4.0 | 5.4.11.3 | - |
| 5.3.0 | 5.3.12.3 | - |
Fixed versions
| 2017.12.2.1 | 5.4.11.3 | 5.3.12.3 |
Sources
- osv: GHSA-82rv-45pc-v28w
- https://github.com/ezsystems/ezpublish-legacy/commit/6db0e6b7739481f27d954548388bd3f0ed2c6fdd
- https://github.com/ezsystems/ezpublish-legacy/commit/917711eb7ffe2b52a3e9fe12505f6810a63696f7
- https://github.com/ezsystems/ezpublish-legacy/commit/efcd2b61b15eaaf74e0ff28d6c723cf28e655dab
- https://github.com/ezsystems/ezpublish-legacy/commit/f9ffaf590b63b4f552142cfd4441afbbfb3f19b1
- https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2018-02-26-1.yaml
- https://github.com/ezsystems/ezpublish-legacy
- https://web.archive.org/web/20210614192631/http://share.ez.no/community-project/security-advisories/ezsa-2018-001-several-vulnerabilities-in-forgot-password-information-collector-xml-text-and-matrix-field-type-features
published · modified · JSON