Loading...
Skip to main content
GeekWala

CVE-2020-10806 — Vulnerability in ezsystems/ezpublish-kernel — CVE...

CRITICAL

eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type

Published May 24, 2022Updated December 8, 2024Source: osv

Summary

eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.

Advisory Timeline

  • First published May 24, 2022 (1602 days ago).
  • Last revised December 8, 2024 — 929 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

Composer
Update ezsystems/ezpublish-kernel to 7.5.6.2 or later
composer require "ezsystems/ezpublish-kernel:^7.5.6.2"
Composer
Update ezsystems/ezpublish-kernel to 5.4.14.1 or later
composer require "ezsystems/ezpublish-kernel:^5.4.14.1"
Composer
Update ezsystems/ezpublish-legacy to 2019.03.4.2 or later
composer require "ezsystems/ezpublish-legacy:^2019.03.4.2"
Composer
Update ezsystems/ezpublish-kernel to 6.13.6.2 or later
composer require "ezsystems/ezpublish-kernel:^6.13.6.2"
Composer
Update ezsystems/ezpublish-legacy to 5.4.14.1 or later
composer require "ezsystems/ezpublish-legacy:^5.4.14.1"
Composer
Update ezsystems/ezpublish-legacy to 2017.12.7.2 or later
composer require "ezsystems/ezpublish-legacy:^2017.12.7.2"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (6)

Affects 1 ecosystem: packagist (2).

PackageEcosystemAffectedFixed In
ezsystems/ezpublish-kernel
packagist
v7.0.0, v7.0.0-beta1, v7.0.0-beta2, v7.0.0-beta3 (+55 more)7.5.6.2
ezsystems/ezpublish-kernel
packagist
5.0.0, 5.1.0-beta2, 5.1.0-rc1, 5.1.0-stable (+3 more)5.4.14.1
ezsystems/ezpublish-legacy
packagist
v2019.03.0, v2019.03.0-rc1, v2019.03.0-rc2, v2019.03.1 (+3 more)2019.03.4.2
ezsystems/ezpublish-kernel
packagist
v6.0.0, v6.0.0-alpha1, v6.0.0-alpha2, v6.0.0-alpha3 (+174 more)6.13.6.2
ezsystems/ezpublish-legacy
packagist
All versions5.4.14.1
ezsystems/ezpublish-legacy
packagist
v2017.08.0, v2017.08.1, v2017.08.1.1, v2017.10.0 (+18 more)2017.12.7.2

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2020-10806?
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.8/10).
How do I check if my project is affected by CVE-2020-10806?
CVE-2020-10806 affects ezsystems/ezpublish-kernel and ezsystems/ezpublish-legacy. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2020-10806 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
9.8

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-54p5-gxq6-j98g

Related CVEs

More Packagist advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies