Unrated severityNVD Advisory· Published Dec 31, 2005· Updated Jun 16, 2026

CVE-2005-4851

Description

eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects.

Affected products

Ez/Ez Publish
cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*
Range: >=3.4.4,<=3.7
eZ Systems/eZ Publish Legacyllm-fuzzy
Range: >=3.4.4 <=3.7 (before 20050722)

Patches

Vulnerability mechanics

References

ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0nvdProduct
issues.ez.no/6841nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000