| Package | Affected versions | Patched versions |
|---|---|---|
| ez publish | = 3.5.0= 3.5.1= 3.5.10= 3.5.11= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.5.8= 3.5.9= 3.6.0= 3.6.1= 3.6.10= 3.6.11= 3.6.12= 3.6.2= 3.6.3= 3.6.4= 3.6.5= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 3.7.0= 3.7.1= 3.7.10= 3.7.11= 3.7.12= 3.7.2= 3.7.3= 3.7.4= 3.7.5= 3.7.6= 3.7.7= 3.7.8= 3.7.9 |
eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free