Packagist/ibexa/user: medium
ibexa/user login enumerates user accounts
Action: Upgrade ibexa/user to 5.0.3 or later.
composer require ibexa/user:5.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.3 | - |
Fixed versions
| 5.0.3 |
Sources
- osv: GHSA-q3x8-6898-23g3
- https://github.com/ibexa/user/security/advisories/GHSA-q3x8-6898-23g3
- https://developers.ibexa.co/security-advisories/ibexa-sa-2025-004-xss-and-enumeration-vulnerabilities-in-back-office
- https://github.com/ibexa/user
published · modified · JSON