CVE:CVE-2022-48366
CNNVD:CNNVD-202303-853
Ez Systems eZ Platform是挪威Ez Systems公司的一套基于Symfony框架的内容管理系统（CMS）。
Ez Systems eZ Platform Ibexa Kernel 1.3.19之前版本存在安全漏洞。攻击者利用该漏洞通过定时攻击确定帐户的存在。
solution:Upgrade ibexa commerce to a higher version than 2.5.13,3.3.18,4.0.7,4.1.4,and avoid the version [2.5.0,2.5.13),[3.3.0,3.3.18),[4.0.0,4.0.7),[4.1.0,4.1.4); Upgrade ibexa digital_experience_platform to a higher version than 3.3.20,4.0.7,4.1.4,and avoid the version [3.3.0,3.3.20),[4.0.0,4.0.7),[4.1.0,4.1.4); Upgrade ibexa ez_platform to a higher version than 2.5.30,and avoid the version (,2.5.30); Upgrade ibexa ezplatform-page-builder to a higher version than 1.3.27,2.3.19,and avoid the version [1.3.0,1.3.27),[2.3.0,2.3.19); Upgrade ibexa jmspaymentcorebundle to a higher version than 3.0.2,and avoid the version [3.0.0,3.0.2); Upgrade ibexa ez_platform_kernel to a higher version than 1.3.19,7.5.29,and avoid the version [1.3.0,1.3.19),[7.5.0,7.5.29); Upgrade ibexa kernel to a higher version than 4.0.7,4.1.4,and avoid the version [4.0.0,4.0.7),[4.1.0,4.1.4)