-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause Analysismt_rand() which is cryptographically insecure. 2) XML text handlers leaked object names by not verifying read permissions. 3) Matrix templates lacked output sanitization allowing XSS. 4) Information collector didn't validate() form types, enabling spoofed submissions. Each vulnerability is directly addressed by specific patches modifying these components, with clear security implications documented in advisories.| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ezsystems/ezpublish-legacy | composer | >= 2011.0.0, < 2017.12.2.1 | 2017.12.2.1 |
| ezsystems/ezpublish-legacy | composer | >= 5.4.0, < 5.4.11.3 | 5.4.11.3 |
| ezsystems/ezpublish-legacy | composer | >= 5.3.0, < 5.3.12.3 | 5.3.12.3 |
Ongoing coverage of React2Shell