Vulnerability in Ez Publish

CVE-2005-4854

eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders.

EPSS: 0.011 (62.7th percentile) — read the EPSS interpretation.

Affected products

  • Ez Ez_publish — versions 3.5.0, 3.5.1, 3.5.2
  • N/a — versions n/a

Weakness classification (CWE)

References