Packagist/ezsystems/ezpublish-legacy: high

Content object state fetch functions open to SQL injection

Action: Upgrade ezsystems/ezpublish-legacy to 2017.12.7.4 or later.

composer require ezsystems/ezpublish-legacy:2019.03.6.1

composer require ezsystems/ezpublish-legacy:2017.12.7.4

Affected

Fixed versions

Sources

• osv: GHSA-jpwx-ffjq-wr4w
• https://github.com/ezsystems/ezpublish-legacy/security/advisories/GHSA-jpwx-ffjq-wr4w
• https://github.com/ezsystems/ezpublish-legacy/commit/f8e3a97afd92efb9148134a4bacb35a875777a42
• https://developers.ibexa.co/security-advisories/ibexa-sa-2021-005-content-object-state-fetch-functions-open-to-sql-injection
• https://github.com/ezsystems/ezpublish-legacy

published 2021-09-07T22:54:23Z · modified 2024-12-02T05:54:42.708773Z · JSON