Security

SECURITY.md

Security

How to report security vulnerabilities

https://doc.ibexa.co/en/latest/infrastructure_and_maintenance/security/reporting_issues/

Security advisories

https://developers.ibexa.co/security-advisories

Security policy

https://www.ibexa.co/software-information/security

Security blog posts

https://www.ibexa.co/topics/id/60

Files with blacklisted extensions can be still saved to drafts
GHSA-9j39-4686-m3c4 published Mar 20, 2024 by glye

Moderate
Download route allows filename change
GHSA-g95c-xc83-8353 published Nov 3, 2023 by glye

Low
Users with the Company admin role can assign any role to any user
GHSA-394j-x37r-2q27 published Nov 10, 2022 by glye

Critical
Object state limitation has no effect
GHSA-gvj8-4cj4-h776 published Apr 28, 2022 by glye

Critical
IBX-1755: Login timing attack
GHSA-2x4v-g8cx-jxrq published May 31, 2022 by glye

Critical

Learn more about advisories related to ibexa/core in the GitHub Advisory Database