Home

Description

Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerating object IDs.

PUBLISHED Reserved 2026-01-09 | Published 2026-03-06 | Updated 2026-03-06 | Assigner mitre

References

ibexa.com

ez.com

gist.github.com/zywsec/a2bd04864895c8fd6d73dcf14a1f7607

cve.org (CVE-2025-70363)

nvd.nist.gov (CVE-2025-70363)

Download JSON