CVE-2020-23065

MEDIO 5.4CVE-2020-23065 · Published 26/06/2023 · updated 17/06/2026

In breve

CVE-2020-23065 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda ezpublish legacy (ibexa), ezpublish platform (ibexa).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.49%, superiore al 42.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ezpublish legacy ibexa	`= 5.4`	No fix yet
ezpublish platform ibexa	`= 5.4`	No fix yet

Description

Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf.

References

ezplatform.com/security-advisories/ezsa-2020-003-xss-in-demobundle-ezdemo-bundled-videojs · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free