Packagist/ezsystems/ezplatform-admin-ui: medium 5.4

eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget

Action: Upgrade ezsystems/ezplatform-admin-ui to 3.3.39 or later.

composer require ezsystems/ezplatform-admin-ui:3.3.39

Affected

Fixed versions

Sources

• osv: GHSA-gc5h-6jx9-q2qh
• https://github.com/ezsystems/ezplatform-admin-ui/security/advisories/GHSA-gc5h-6jx9-q2qh
• https://github.com/ibexa/admin-ui/security/advisories/GHSA-qm44-wjm2-pr59
• https://github.com/ezsystems/ezplatform-admin-ui/commit/7a9f991b200fa5a03d49cd07f50577c8bc90a30b
• https://developers.ibexa.co/security-advisories/ibexa-sa-2024-004-dom-based-xss-in-file-upload
• https://github.com/ezsystems/ezplatform-admin-ui

published 2024-07-31T17:01:59Z · modified 2026-02-04T04:01:43.647343Z · JSON