Security

SECURITY.md

Security

How to report security vulnerabilities

https://doc.ibexa.co/en/latest/infrastructure_and_maintenance/security/reporting_issues/

Security advisories

https://developers.ibexa.co/security-advisories

Security policy

https://www.ibexa.co/software-information/security

Security blog posts

https://www.ibexa.co/topics/id/60

Files with blacklisted extensions can be still saved to drafts
GHSA-mwvh-p3hx-x4gg published Mar 20, 2024 by glye

Moderate
Download route allows filename change
GHSA-gv2c-5g79-h73c published Nov 3, 2023 by glye

Low
Users with the Company admin role can assign any role to any user
GHSA-8h83-chh2-fchp published Nov 10, 2022 by glye

Critical
Object state limitation has no effect
GHSA-w8qp-hmh5-4v9v published Apr 28, 2022 by glye

Critical
IBX-1755: Login timing attack
GHSA-342c-vcff-2ff2 published May 31, 2022 by glye

Critical

Learn more about advisories related to ezsystems/ezplatform-kernel in the GitHub Advisory Database