{"action":"Upgrade ezsystems/ezplatform-admin-ui to 1.5.29 or later.","affected":[{"fixed":"1.5.29","introduced":"1.5.0"},{"fixed":"2.3.26","introduced":"2.3.0"}],"component":"ezsystems/ezplatform-admin-ui","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.5.29","2.3.26"],"ghsa_id":"GHSA-pcpm-vc4v-cmvx","id":"tcs_01M5KF69Q4S5WCJCP0SKCNVM8N","modified_at":"2024-12-03T06:10:51.850719Z","published_at":"2022-11-10T23:56:45Z","references":["https://osv.dev/vulnerability/GHSA-pcpm-vc4v-cmvx","https://github.com/ezsystems/ezplatform-admin-ui/security/advisories/GHSA-pcpm-vc4v-cmvx","https://github.com/ezsystems/ezplatform-admin-ui/commit/29e156a7bbecca5abd946c99546a261679587d29","https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulnerabilities-in-graphql-role-assignment-ct-editing-and-drafts-tooltips","https://github.com/ezsystems/ezplatform-admin-ui"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-pcpm-vc4v-cmvx","url":"https://osv.dev/vulnerability/GHSA-pcpm-vc4v-cmvx"}],"summary":"eZ Platform users with the Company admin role can assign any role to any user"}