critical9.8
CVE-2022-25337
Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.
Impact
Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibexa | Ez Platform Kernel | from 1.3.0 before 1.3.12 from 7.5.0 before 7.5.26 |