Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
eZ Publish 政策函数的模块检测缺失漏洞
Vulnerability Description
eZ publish 3.8.9版本之前的版本,和3.9.3版本之前的3.9版本,没有适当地检测缺乏一个政策函数的模块检测上的许可信息,这会产生未知影响和攻击向量,例如shop模块上的折扣功能中的漏洞。
CVSS Information
N/A
Vulnerability Type
N/A