tocsin

CVE-2022-48366

2 advisories.

Packagist/ezsystems/ezplatform-kernel CVE-2022-48366: low 3.7, EPSS 0.46%

Timing attack in eZ Platform Ibexa

Action: Upgrade ezsystems/ezplatform-kernel to 1.3.19 or later.

composer require ezsystems/ezplatform-kernel:1.3.19

Affected

introducedfixedlast affected
1.3.01.3.19-

Fixed versions

1.3.19

Sources

CVE-2022-48366 · published · modified · JSON

Packagist/ezsystems/ezpublish-kernel CVE-2022-48366: low 3.7, EPSS 0.46%

Timing attack in eZ Platform Ibexa

Action: Upgrade ezsystems/ezpublish-kernel to 7.5.29 or later.

composer require ezsystems/ezpublish-kernel:7.5.29

Affected

introducedfixedlast affected
7.5.07.5.29-

Fixed versions

7.5.29

Sources

CVE-2022-48366 · published · modified · JSON