CVE:CVE-2022-48367
CNNVD:CNNVD-202303-852
Ez Systems eZ Platform是挪威Ez Systems公司的一套基于Symfony框架的内容管理系统（CMS）。
eZ Publish Ibexa Kernel 7.5.28之前版本存在安全漏洞，该漏洞源于访问控制处理不当。
solution:Upgrade ibexa digital_experience_platform to a higher version than 3.3.18,4.0.5,4.1.2,and avoid the version [3.3.0,3.3.18),[4.0.0,4.0.5),[4.1.0,4.1.2); Upgrade ibexa ezplatform-http-cache-fastly to a higher version than 1.1.9,2.0.11,and avoid the version [1.1.0,1.1.9),[2.0.0,2.0.11); Upgrade ibexa fastly to a higher version than 4.0.5,4.1.2,and avoid the version [4.0.0,4.0.5),[4.1.0,4.1.2); Upgrade ibexa ez_platform_kernel to a higher version than 1.3.17,7.5.28,and avoid the version [1.3.0,1.3.17),[7.5.0,7.5.28); Upgrade ibexa kernel to a higher version than 4.0.7,4.1.4,and avoid the version [4.0.0,4.0.7),[4.1.0,4.1.4)