Packagist/ezsystems/ezpublish-kernel: low
Download route allows filename change in eZpublish kernel
Action: Upgrade ezsystems/ezpublish-kernel to 7.5.31 or later.
composer require ezsystems/ezpublish-kernel:7.5.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.5.0 | 7.5.31 | - |
Fixed versions
| 7.5.31 |
Sources
- osv: GHSA-946c-f9w6-2c25
- https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-946c-f9w6-2c25
- https://github.com/ezsystems/ezpublish-kernel/commit/142152f9bae4c4835713df0bdfe22bc98d03f9a1
- https://github.com/ezsystems/ezpublish-kernel
published · modified · JSON