Ez Platform Kernel
Approved changes feed: RSS · Atom
cpe:2.3:o:ibexa:ez_platform_kernel:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Ibexa (a665ceae-5f4f-5036-b1ae-3820f5497dfc) |
|---|---|
| Product | Ez Platform Kernel (6d7ea003-c160-544f-9bd9-d535288529cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/ezsystems/ezplatform-core |
purl2cpe | 2026-06-01 10:15:04.323562 |
pkg:github/ezsystems/ezplatform-core |
purl2cpe | 2026-06-01 10:15:04.323564 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-48367 |
vulnerable | 2026-06-03 14:48:33.454002 |
Details available
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.
Published: 2023-03-12T00:00:00.000Z
Updated: 2025-03-04T16:52:08.394Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48366 |
vulnerable | 2026-06-03 14:48:33.450575 |
Details available
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.
Published: 2023-03-12T00:00:00.000Z
Updated: 2025-03-04T16:54:22.053Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48365 |
vulnerable | 2026-06-03 14:48:33.447344 |
Details available
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.
Published: 2023-03-12T00:00:00.000Z
Updated: 2025-03-04T20:44:16.171Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46876 |
vulnerable | 2026-06-03 14:45:46.113628 |
Details available
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence.
Published: 2023-03-12T00:00:00.000Z
Updated: 2025-03-05T16:44:45.468Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46875 |
vulnerable | 2026-06-03 14:45:46.113206 |
Details available
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.
Published: 2023-03-12T00:00:00.000Z
Updated: 2025-03-04T21:15:50.044Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.