Security Advisory

CVE-2022-25337

9.8
CRITICAL

Vulnerability Description

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.
Published Date February 18, 2022
Official Source NIST NVD Advisory