Packagist/ezsystems/ezpublish-kernel: critical

Login timing attack in ezsystems/ezpublish-kernel

Action: Upgrade ezsystems/ezpublish-kernel to 7.5.29 or later.

composer require ezsystems/ezpublish-kernel:7.5.29

Affected

Fixed versions

Sources

• osv: GHSA-xfqg-p48g-hh94
• https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-xfqg-p48g-hh94
• https://github.com/ezsystems/ezpublish-kernel/commit/913fe17281536a91437d94e8267181ae8b57f5d5
• https://developers.ibexa.co/security-advisories/ibexa-sa-2022-006-vulnerabilities-in-page-builder-login-and-commerce
• https://github.com/ezsystems/ezpublish-kernel
• https://issues.ibexa.co/browse/IBX-1755

published 2022-06-02T21:02:00Z · modified 2026-02-04T03:41:17.912470Z · JSON