{"action":"Upgrade ezsystems/ezplatform-kernel to 1.3.19 or later.","affected":[{"fixed":"1.3.19","introduced":"1.3.0"}],"component":"ezsystems/ezplatform-kernel","cve_ids":["CVE-2022-48366"],"ecosystem":"Packagist","epss":0.00458,"exploited":false,"fixed_versions":["1.3.19"],"ghsa_id":"GHSA-66m4-gc8h-hpjx","id":"tcs_01M5KEWRMSEHVSDVGWZHA952ZH","modified_at":"2025-03-04T19:25:52.226290Z","published_at":"2023-03-12T06:30:21Z","references":["https://osv.dev/vulnerability/GHSA-66m4-gc8h-hpjx","https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-342c-vcff-2ff2","https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-xfqg-p48g-hh94","https://nvd.nist.gov/vuln/detail/CVE-2022-48366","https://developers.ibexa.co/security-advisories/ibexa-sa-2022-006-vulnerabilities-in-page-builder-login-and-commerce","https://github.com/ezsystems/ezplatform-kernel"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-66m4-gc8h-hpjx","url":"https://osv.dev/vulnerability/GHSA-66m4-gc8h-hpjx"}],"summary":"Timing attack in eZ Platform Ibexa"}