p PatchFirst

GHSA-44m4-9cjp-j587

GHSA-44m4-9cjp-j587 · IBX-1392: Image filenames sanitization

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files.

Fix available

Published
Updated

Stack: php

Affected products and versions

  • ezsystems/ezpublish-kernel Packagist

    Versions
    • v7.5.0
    • v7.5.1
    • v7.5.10
    • v7.5.11
    • v7.5.12
    • v7.5.13
    • v7.5.14
    • v7.5.15
    • v7.5.15.1
    • v7.5.15.2
    • v7.5.16
    • v7.5.17
    • v7.5.18
    • v7.5.19
    • v7.5.2
    • v7.5.20
    • v7.5.21
    • v7.5.22
    • v7.5.23
    • v7.5.24
    • v7.5.25
    • v7.5.3
    • v7.5.4
    • v7.5.5
    • v7.5.6
    • v7.5.6-rc1
    • v7.5.6.2
    • v7.5.7
    • v7.5.7-rc1
    • v7.5.7.1
    • v7.5.8
    • v7.5.9
    • v7.5.9.1
    Affected ranges
    • ECOSYSTEM: ≥ 7.5.0, < 7.5.26

    Update to 7.5.26

Original sources

Check your server →