Ibexa DXP ezsystems/ezpublish-kernel... CVE-2022-25336

4.3 AV AC AU C I A
发布： 2022-02-18
修订： 2024-11-21

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files because the image path and filename can be correctly deduced.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有2条受影响产品信息