ezsystems/ezplatform
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Any storage file can be downloaded from p.sh if full server path is known | ezsystems/ezplatform | Composer | High | Fix reported | |
| eZ Platform Rules to disable executable access are ignored on Platform.sh (eZ Cloud) | ezsystems/ezplatform | Composer | Medium | Fix reported | |
| eZ Platform Prevent accepting app.php in URL in Platform.sh | ezsystems/ezplatform | Composer | Medium | Fix reported | |
| eZ Platform CSRF token in login form is disabled by default | ezsystems/ezplatform | Composer | High | Fix reported |