Packagist/ezsystems/ezpublish-legacy: high
eZ Publish Legacy Passwordless login for LDAP users
Action: Upgrade ezsystems/ezpublish-legacy to 5.3.12.4 or later.
composer require ezsystems/ezpublish-legacy:2018.9.1.1composer require ezsystems/ezpublish-legacy:2018.6.1.2composer require ezsystems/ezpublish-legacy:2017.12.4.1composer require ezsystems/ezpublish-legacy:5.4.12.1composer require ezsystems/ezpublish-legacy:5.3.12.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2018.9.0 | 2018.9.1.1 | - |
| 2018.6.0 | 2018.6.1.2 | - |
| 2011.0.0 | 2017.12.4.1 | - |
| 5.4.0 | 5.4.12.1 | - |
| 5.3.0 | 5.3.12.4 | - |
Fixed versions
| 2018.9.1.1 | 2018.6.1.2 | 2017.12.4.1 | 5.4.12.1 | 5.3.12.4 |
Sources
- osv: GHSA-p9mp-vq4v-v5m5
- https://github.com/ezsystems/ezpublish-legacy/pull/1394
- https://github.com/ezsystems/ezpublish-legacy/commit/01930a95637389301f762be1439f726013e58aba
- https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2018-10-31-1.yaml
- https://github.com/ezsystems/ezpublish-legacy
- https://issues.ibexa.co/browse/EZP-29703
- https://web.archive.org/web/20201027063527/https://magento.com/security/news/new-zend-framework-1-security-vulnerability
- https://web.archive.org/web/20210614184552/https://share.ez.no/community-project/security-advisories/ezsa-2018-005-passwordless-login-for-ldap-users
published · modified · JSON