Packagist/ibexa/post-install: high
Any storage file can be downloaded from p.sh if full server path is known
Action: Upgrade ibexa/post-install to 1.0.4.1 or later.
composer require ibexa/post-install:1.0.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.4.1 | - |
Fixed versions
| 1.0.4.1 |
Sources
- osv: GHSA-gqcf-83rq-gpfr
- https://github.com/ibexa/post-install/security/advisories/GHSA-gqcf-83rq-gpfr
- https://developers.ibexa.co/security-advisories/ibexa-sa-2021-006-storage-and-legacy-files-accessible-if-path-is-known
- https://github.com/ibexa/post-install
published · modified · JSON