← Back

CVE-2005-4850

nvd nist
Published: Dec 31, 2005Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.

Affected (1)

Products: Ez: Ez Publish
Ez
1 product
Ez Publish
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ez Publish
From 3.5.0 to 3.7

Related CWEs

CWE-264
CWE-264

References (4)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.