IBX-1392: Image filenames sanitization

概要

参考情報

• ezsystems/ezpublish-kernel security advisory · WEB
• developers.ibexa.co/security-advisories/ibexa-sa-2022-001-image-filenames-sanitization · WEB
• ezsystems/ezpublish-kernel · WEB
• ezsystems/ezpublish-kernel release v7.5.26 · WEB

ezsystems/ezpublish-kernel のその他の脆弱性

• GHSA-64vj-933f-6pm3高eZ Platform Object Injection in SiteAccessMatchListener
• GHSA-3vwr-jj4f-h98x高eZ Publish Remote code execution in file uploads
• GHSA-9wwx-c723-vm8x中eZ Platform REST API returns list of all SiteAccesses
• GHSA-946c-f9w6-2c25低Download route allows filename change in eZpublish kernel
• CVE-2022-48367緊急 9.8An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.