VULNERABILITY INTELLIGENCE

CVE-2007-4494

CVSS score5 MEDIUM
EPSS probability1.68%
CISA KEVNot currently listed
Published2007-08-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.

Primary references