Packagist/ezsystems/ezpublish-legacy: high
eZ Publish Information disclosure in backend content tree menu
Action: Upgrade ezsystems/ezpublish-legacy to 5.3.12.2 or later.
composer require ezsystems/ezpublish-legacy:2017.8.1.1composer require ezsystems/ezpublish-legacy:5.4.10.1composer require ezsystems/ezpublish-legacy:5.3.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2011.0.0 | 2017.8.1.1 | - |
| 5.4.0 | 5.4.10.1 | - |
| 5.3.0 | 5.3.12.2 | - |
Fixed versions
| 2017.8.1.1 | 5.4.10.1 | 5.3.12.2 |
Sources
- osv: GHSA-cc2j-92jq-wgjg
- https://github.com/ezsystems/ezpublish-legacy/commit/a4a0470f8d80f012fe14e4f8ab11c7d14375986c
- https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2017-09-11-1.yaml
- https://github.com/ezsystems/ezpublish-legacy
- http://share.ez.no/community-project/security-advisories/ezsa-2017-006-information-disclosure-in-backend-content-tree-menu
published · modified · JSON