VULNERABILITY INTELLIGENCE
CVE-2007-4493
CVSS score10 HIGH
EPSS probability1.80%
CISA KEVNot currently listed
Published2007-08-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module.