CVE-2006-7218
eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perfo…
Published: 2007-07-06 · CVSS: Unscored
eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7