Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/ezsystems/ezpublish-kernel@6.2.1
purl pkg:composer/ezsystems/ezpublish-kernel@6.2.1
Next non-vulnerable version 6.13.8.2
Latest non-vulnerable version 8.0.0-beta1
Risk 4.5
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-8g2d-vzzv-3ygm
Aliases:
CVE-2020-10806
GHSA-54p5-gxq6-j98g
6.13.6+2
Affected by 0 other vulnerabilities.
6.13.6.2
Affected by 5 other vulnerabilities.
7.5.6+2
Affected by 0 other vulnerabilities.
7.5.6.2
Affected by 12 other vulnerabilities.
VCID-93qx-tphk-qbhg
Aliases:
CVE-2021-46875
GHSA-mrvj-7q4f-5p42
GMS-2021-111
GMS-2021-47
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.
6.13.8.2
Affected by 0 other vulnerabilities.
6.13.8+2
Affected by 0 other vulnerabilities.
7.5.15+2
Affected by 0 other vulnerabilities.
7.5.15.2
Affected by 7 other vulnerabilities.
VCID-exzc-3hus-hycx
Aliases:
GMS-2018-63
Information Exposure REST API returns list of all site accesses.
6.7.9+1
Affected by 0 other vulnerabilities.
6.7.9.1
Affected by 2 other vulnerabilities.
6.13.5+1
Affected by 0 other vulnerabilities.
6.13.6-rc1
Affected by 7 other vulnerabilities.
7.2.4+1
Affected by 0 other vulnerabilities.
7.2.4.1
Affected by 2 other vulnerabilities.
7.3.2+1
Affected by 0 other vulnerabilities.
7.4.3-rc1
Affected by 2 other vulnerabilities.
VCID-f6js-5w78-w7a5
Aliases:
GHSA-9wwx-c723-vm8x
eZ Platform REST API returns list of all SiteAccesses
6.7.9+1
Affected by 0 other vulnerabilities.
6.7.9.1
Affected by 2 other vulnerabilities.
6.13.5+1
Affected by 0 other vulnerabilities.
6.13.5.1
Affected by 7 other vulnerabilities.
7.2.4+1
Affected by 0 other vulnerabilities.
7.2.4.1
Affected by 2 other vulnerabilities.
7.3.2+1
Affected by 0 other vulnerabilities.
7.3.2.1
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.