| Package | Affected versions | Patched versions |
|---|---|---|
| ez publish | = 3.9.0= 3.9.1= 3.9.2≤ 3.8.8 |
The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free