CVE-2005-4851

MEDIUM · CVSS 4 EPSS 0.88%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2005-4851

Severity

MEDIUM

CVSS

EPSS

0.88%

Original Filing — NVD Description

eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects.