{"action":"Upgrade ezsystems/ezplatform-kernel to 1.3.34 or later.","affected":[{"fixed":"1.3.34","introduced":"1.3.0"}],"component":"ezsystems/ezplatform-kernel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.3.34"],"ghsa_id":"GHSA-gv2c-5g79-h73c","id":"tcs_01M5KF339E5MSTYK79VNM9WQNW","modified_at":"2024-11-28T05:32:57.540245Z","published_at":"2023-11-03T19:51:54Z","references":["https://osv.dev/vulnerability/GHSA-gv2c-5g79-h73c","https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-gv2c-5g79-h73c","https://github.com/ezsystems/ezplatform-kernel/commit/affa2520e5e986e477ca7f7c93b9ca2c30188063","https://developers.ibexa.co/security-advisories/ibexa-sa-2023-005-vulnerabilities-in-solr-search-and-file-downloads","https://github.com/ezsystems/ezplatform-kernel"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-gv2c-5g79-h73c","url":"https://osv.dev/vulnerability/GHSA-gv2c-5g79-h73c"}],"summary":"Ibexa ezplatform-kernel download route allows filename change"}