{"action":"Upgrade ezsystems/ezplatform to 1.13.6.1 or later.","affected":[{"fixed":"2.5.24.1","introduced":"2.0.0"},{"fixed":"1.13.6.1","introduced":"0"}],"component":"ezsystems/ezplatform","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.5.24.1","1.13.6.1"],"ghsa_id":"GHSA-2rh5-jvgx-pgw3","id":"tcs_01M5KES89J65DBPDB672SXTFA1","modified_at":"2024-12-02T05:44:17.453978Z","published_at":"2021-09-14T20:25:13Z","references":["https://osv.dev/vulnerability/GHSA-2rh5-jvgx-pgw3","https://github.com/ezsystems/ezplatform/security/advisories/GHSA-2rh5-jvgx-pgw3","https://developers.ibexa.co/security-advisories/ibexa-sa-2021-006-storage-and-legacy-files-accessible-if-path-is-known","https://github.com/ezsystems/ezplatform"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-2rh5-jvgx-pgw3","url":"https://osv.dev/vulnerability/GHSA-2rh5-jvgx-pgw3"}],"summary":"Any storage file can be downloaded from p.sh if full server path is known"}