high7.5
CVE-2025-70363
Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via …
Impact
Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerating object IDs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibexa | Ez Platform | from 2.0.0 through 2.5.32 |