← Database

CVE-2022-48367

CRITICAL CVSS: 9.8 Published: 2023-03-12 Modified: 2026-06-17

Description

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.

Affected Platforms

Ibexa FastlyIbexa Ez Platform KernelIbexa KernelIbexa Digital Experience PlatformIbexa Ezplatform-Http-Cache-Fastly

Weakness Type

CWE-862, CWE-862

References