CVE-2022-25336

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files…

published February 18, 2022

CVSS
—
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files because the image path and filename can be correctly deduced.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00707 · 52.9th percentile
Published
2022-02-18T17:49Z
EPSS history
Timeline
  • 18 FEB 17:49Z
    Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files…
    cvelistv5