Skip to content

Object state limitation has no effect

Critical
glye published GHSA-5x4f-7xgq-r42x Apr 28, 2022

Package

composer ezsystems/ezpublish-kernel (Composer)

Affected versions

v7.5.*

Patched versions

v7.5.28

Description

Please see https://developers.ibexa.co/security-advisories/ibexa-sa-2022-004-ineffective-object-state-limitation-and-unauthenticated-fastly-purge

Severity

Critical

CVE ID

No known CVE

Weaknesses

No CWEs