Vulnerability in Ez Publish

CVE-2005-4853

The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings.

EPSS: 0.015 (70.7th percentile) — read the EPSS interpretation.

Affected products

  • Ez Ez_publish — versions 3.5.0, 3.5.1, 3.5.2
  • N/a — versions n/a

Weakness classification (CWE)

References