CVE-2024-23756

2024-02-0800:00:00

mitre

www.cve.org

cve-2024-23756

plone

docker

http methods

security vulnerability

unauthenticated attackers

file upload

file deletion

0.0005 Low

EPSS

Percentile

17.8%

JSON

The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them.

References

github.com/c0d3x27/CVEs/tree/main/CVE-2024-23756

0.0005 Low

EPSS

Percentile

17.8%

JSON

Related for CVELIST:CVE-2024-23756