Packagist/ezsystems/ezplatform: medium
eZ Platform Prevent accepting app.php in URL in Platform.sh
Action: Upgrade ezsystems/ezplatform to 1.7.9.1 or later.
composer require ezsystems/ezplatform:2.5.4composer require ezsystems/ezplatform:1.13.5.1composer require ezsystems/ezplatform:1.7.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5.0 | 2.5.4 | - |
| 1.13.0 | 1.13.5.1 | - |
| 1.7.0 | 1.7.9.1 | - |
Fixed versions
| 2.5.4 | 1.13.5.1 | 1.7.9.1 |
Sources
- osv: GHSA-qhjc-hg94-245v
- https://github.com/ezsystems/ezplatform/commit/34ce86722b36a172e587068fe64a84faa7320cc2
- https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezplatform/2019-09-03-2.yaml
- https://github.com/ezsystems/ezplatform
- https://share.ez.no/community-project/security-advisories/ezsa-2019-007-prevent-accepting-app.php-in-url-in-platform.sh
published · modified · JSON