Packagist/ezsystems/ezplatform-kernel: low
Ibexa ezplatform-kernel download route allows filename change
Action: Upgrade ezsystems/ezplatform-kernel to 1.3.34 or later.
composer require ezsystems/ezplatform-kernel:1.3.34Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.0 | 1.3.34 | - |
Fixed versions
| 1.3.34 |
Sources
- osv: GHSA-gv2c-5g79-h73c
- https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-gv2c-5g79-h73c
- https://github.com/ezsystems/ezplatform-kernel/commit/affa2520e5e986e477ca7f7c93b9ca2c30188063
- https://developers.ibexa.co/security-advisories/ibexa-sa-2023-005-vulnerabilities-in-solr-search-and-file-downloads
- https://github.com/ezsystems/ezplatform-kernel
published · modified · JSON