CVE-2022-41876
1 advisory.
Packagist/ezsystems/ezplatform-graphql CVE-2022-41876: high 7.5, EPSS 1.44%
ezplatform-graphql GraphQL queries can expose password hashes
Action: Upgrade ezsystems/ezplatform-graphql to 1.0.13 or later.
composer require ezsystems/ezplatform-graphql:1.0.13composer require ezsystems/ezplatform-graphql:2.3.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0-rc1 | 1.0.13 | - |
| 2.0.0-beta1 | 2.3.12 | - |
Fixed versions
| 1.0.13 | 2.3.12 |
Sources
- osv: GHSA-c7pc-pgf6-mfh5
- https://github.com/ezsystems/ezplatform-graphql/security/advisories/GHSA-c7pc-pgf6-mfh5
- https://nvd.nist.gov/vuln/detail/CVE-2022-41876
- https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulnerabilities-in-graphql-role-assignment-ct-editing-and-drafts-tooltips
- https://github.com/ezsystems/ezplatform-graphql
CVE-2022-41876 · published · modified · JSON