CVE-2005-4850: eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit dat...

Security readout for executives and security teams

This is an old eZ publish authorization flaw. A remote attacker could change data submitted by anonymous users, creating integrity risk for public forms or user-submitted content. The supplied record does not provide severity scoring, CWE mapping, or evidence of active exploitation. Exposure is most likely limited to legacy eZ publish 3.5, 3.6, or 3.7 deployments older than the 2005-06-08 vendor fix, especially public sites accepting anonymous submissions. Prioritize if the organization still runs legacy eZ publish sites with anonymous submissions. For modern environments without eZ publish 3.5-3.7, urgency is low, but asset inventory should confirm absence. Mitigation focus: Inventory any remaining eZ publish 3.5 through 3.7 installations.; Upgrade affected systems to a vendor-fixed release after 2005-06-08.; Check vendor changelog and issue 6680 guidance before changing production systems..

Prepared

Jun 29, 2026, 04:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.