Vulnerability Description
eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ez | Ez Publish | >= 3.5.0, <= 3.7 |
Related Weaknesses (CWE)
References
- http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_xPatchVendor Advisory
- http://issues.ez.no/6680Broken Link
- http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_xPatchVendor Advisory
- http://issues.ez.no/6680Broken Link
FAQ
What is CVE-2005-4850?
CVE-2005-4850 is a vulnerability with a CVSS score of 5.0 (MEDIUM). eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.
How severe is CVE-2005-4850?
CVE-2005-4850 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-4850?
Check the references section above for vendor advisories and patch information. Affected products include: Ez Ez Publish.