3.5

CVE-2005-4855

EPSS 0.2%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js files, which may enable cross-site scripting (XSS) attacks or other attacks.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ez ≫ Ez Publish Version >= 3.5.0 < 3.5.5

Ez ≫ Ez Publish Version >= 3.6.0 < 3.6.2

Ez ≫ Ez Publish Version3.7.0 Updaterc1

Ez ≫ Ez Publish Version3.8.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.419

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0

Vendor Advisory

http://issues.ez.no/5984

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2005-4855

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-4855

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-4855

EUVD