PT-2022-28187 · Ez Systems · Ezpublish-Kernel

Published 2022-01-21 · Updated 2022-01-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26

Description The issue allows for certain injection attacks and unauthorized access to some image files.

Recommendations For ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26, update to version 7.5.26 or later to resolve the issue.

Related Identifiers

GHSA-44M4-9CJP-J587

Affected Products

Ezpublish-Kernel

References · 5

• https://osv.dev/vulnerability/GHSA-44m4-9cjp-j587 · Vendor Advisory
• https://github.com/ezsystems/ezpublish-kernel/releases/tag/v7.5.26 · Note
• https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-44m4-9cjp-j587 · Note
• https://github.com/ezsystems/ezpublish-kernel · Note
• https://developers.ibexa.co/security-advisories/ibexa-sa-2022-001-image-filenames-sanitization · Note