CVE-2007-4493
eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as d…
Published: 2007-08-23 · CVSS: Unscored
eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7