Ibexa: >> Digital Experience Platform >> 3.3.0 Security Vulnerabilities
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.
CVSS Score
3.7
EPSS Score
0.002
Published
2023-03-12
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-03-12
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.
CVSS Score
7.2
EPSS Score
0.001
Published
2023-03-12