Vulnerabilities

TI-2025-43106 CVE-2025-70363 · GHSA-frjw-grrr-vrpr

Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril…

LOW 39

Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerating object IDs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00278 Published 2026-03-06 No fix listed CWE-284

TI-2022-23980 CVE-2022-48366 · GHSA-66m4-gc8h-hpjx

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.

LOW 18

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00458 Published 2023-03-12 Fixed in 1.3.19, 7.5.29 CWE-362

TI-2022-23979 CVE-2022-48365 · GHSA-qq2j-9pf8-g58c

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.

LOW 35

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00862 Published 2023-03-12 Fixed in 7.5.30, 1.3.26 CWE-269

Vulnerabilities

Filters

Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril…

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.