Vulnerabilities > CVE-2022-25336 - Authorization Bypass Through User-Controlled Key vulnerability in Ibexa EZ Platform Kernel
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files because the image path and filename can be correctly deduced.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |