Lucene search
K

CVE-2016-7135

🗓️ 07 Mar 2017 16:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 60 Views🌐 WEB

Directory traversal vulnerability in Plone CMS allows remote file access for administrators.

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
CNVD
plone file system information disclosure vulnerability
6 Sep 201600:00
cnvd
Cvelist
CVE-2016-7135
7 Mar 201716:00
cvelist
EUVD
EUVD-2017-0091
7 Oct 202500:30
euvd
Github Security Blog
Plone vulnerable to filesystem information leak
14 May 202202:46
github
NVD
CVE-2016-7135
7 Mar 201716:59
nvd
OpenVAS
Plone CMS < 4.3.12, 5.x < 5.0.7 Multiple Vulnerabilities
31 Oct 201600:00
openvas
OSV
GHSA-M7F9-65WR-PWCH Plone vulnerable to filesystem information leak
14 May 202202:46
osv
OSV
PYSEC-2017-58
7 Mar 201716:59
osv
Packet Storm
Plone CMS 4.3.11 / 5.0.6 XSS / Traversal / Open Redirection
12 Oct 201600:00
packetstorm
Prion
Directory traversal
7 Mar 201716:59
prion
Rows per page
NVD
Node
ploneploneMatch4.2
OR
ploneploneMatch4.2.1
OR
ploneploneMatch4.2.2
OR
ploneploneMatch4.2.3
OR
ploneploneMatch4.2.4
OR
ploneploneMatch4.2.5
OR
ploneploneMatch4.2.6
OR
ploneploneMatch4.2.7
OR
ploneploneMatch4.3
OR
ploneploneMatch4.3.1
OR
ploneploneMatch4.3.2
OR
ploneploneMatch4.3.3
OR
ploneploneMatch4.3.4
OR
ploneploneMatch4.3.5
OR
ploneploneMatch4.3.6
OR
ploneploneMatch4.3.7
OR
ploneploneMatch4.3.8
OR
ploneploneMatch4.3.9
OR
ploneploneMatch4.3.10
OR
ploneploneMatch4.3.11
OR
ploneploneMatch5.0
OR
ploneploneMatch5.0a1
OR
ploneploneMatch5.0rc1
OR
ploneploneMatch5.0rc2
OR
ploneploneMatch5.0rc3
OR
ploneploneMatch5.0.1
OR
ploneploneMatch5.0.2
OR
ploneploneMatch5.0.3
OR
ploneploneMatch5.0.4
OR
ploneploneMatch5.0.5
OR
ploneploneMatch5.0.6
OR
ploneploneMatch5.1a1
ParameterPositionPathDescriptionCWE
pathquery paramPlone/++theme++barceloneta/@@plone.resourceeditor.filemanager-actionsPath traversal vulnerability allows reading arbitrary files via path parameterCWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 May 2026 00:24Current
5.2Medium risk
Vulners AI Score5.2
CVSS 24
CVSS 34.9
EPSS0.007
60