An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48367.json"
[
{
"events": [
{
"introduced": "3.3.0"
},
{
"fixed": "3.3.18"
}
]
},
{
"events": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.0.5"
}
]
},
{
"events": [
{
"introduced": "4.1.0"
},
{
"fixed": "4.1.2"
}
]
},
{
"events": [
{
"introduced": "1.1.0"
},
{
"fixed": "1.1.9"
}
]
},
{
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.11"
}
]
},
{
"events": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.0.5"
}
]
},
{
"events": [
{
"introduced": "4.1.0"
},
{
"fixed": "4.1.2"
}
]
},
{
"events": [
{
"introduced": "1.3.0"
},
{
"fixed": "1.3.17"
}
]
},
{
"events": [
{
"introduced": "7.5.0"
},
{
"fixed": "7.5.28"
}
]
},
{
"events": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.0.7"
}
]
},
{
"events": [
{
"introduced": "4.1.0"
},
{
"fixed": "4.1.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.5.28"
}
]
}
]