CVE-2025-67719
1 advisory.
Packagist/ibexa/user CVE-2025-67719: critical
Ibexa User Bundle is missing password change validation
Action: Upgrade ibexa/user to 5.0.4 or later.
composer require ibexa/user:5.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0-beta1 | 5.0.4 | - |
Fixed versions
| 5.0.4 |
Sources
- osv: GHSA-x93p-w2ch-fg67
- https://github.com/ibexa/user/security/advisories/GHSA-x93p-w2ch-fg67
- https://nvd.nist.gov/vuln/detail/CVE-2025-67719
- https://github.com/ibexa/user/commit/9d485bf385e6401c9f7ee80287d8ccd00f73dcf4
- https://developers.ibexa.co/security-advisories/ibexa-sa-2025-005-password-change-and-xss-vulnerabilities-in-back-office
- https://github.com/ibexa/user
CVE-2025-67719 · published · modified · JSON