medium6.1
CVE-2019-12139
ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability
Impact
An XSS issue was discovered in the Admin UI in eZ Platform 2.x. This affects ezplatform-admin-ui 1.3.x before 1.3.5 and 1.4.x before 1.4.4, and ezplatform-page-builder 1.1.x before 1.1.5 and 1.2.x before 1.2.4.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | ezsystems/ezplatform-admin-ui | >= 1.3, < 1.3.5 | 1.3.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ez | Ezplatform-Admin-Ui | from 1.3.0 before 1.3.5 from 1.4.0 before 1.4.4 |
| Ez | Ezplatform-Page-Builder | from 1.1.0 before 1.1.5 from 1.2.0 before 1.2.4 |