CVE-2025-70363

概要

参考情報

• gist.github.com/zywsec/a2bd04864895c8fd6d73dcf14a1f7607 · Third Party Advisory

ez platform のその他の脆弱性

• CVE-2022-48366低 3.7An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.
• CVE-2022-48365高 7.2An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.