CVE-2020-7939

🗓️ 23 Jan 2020 21:13:15Reported by [email protected]Type

SQL Injection vulnerability in Plone 4.0 through 5.2.

Reporter	Title	Published	Views	Family All 10
OSV	Plone SQL Injection Vulnerability	24 May 202217:07	–	osv
OSV	CVE-2020-7939	23 Jan 202021:15	–	osv
OSV	PYSEC-2020-88	23 Jan 202021:15	–	osv
Veracode	SQL Injection	23 Jan 202004:08	–	veracode
Prion	Sql injection	23 Jan 202021:15	–	prion
CVE	CVE-2020-7939	23 Jan 202021:15	–	cve
Cvelist	CVE-2020-7939	23 Jan 202020:38	–	cvelist
Github Security Blog	Plone SQL Injection Vulnerability	24 May 202217:07	–	github
RedhatCVE	CVE-2020-7939	4 Feb 202020:18	–	redhatcve
Tenable Nessus	RHEL 5 : plone (Unpatched Vulnerability)	11 May 202400:00	–	nessus

Nvd

Node

plone ploneRange4.0.0–5.2.1

Source	Link
openwall	www.openwall.com/lists/oss-security/2020/01/22/1
plone	www.plone.org/security/hotfix/20200121
openwall	www.openwall.com/lists/oss-security/2020/01/24/1
plone	www.plone.org/security/hotfix/20200121/sql-injection-in-dtml-or-in-connection-objects

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Jan 2020 21:15Current

9.0High risk

Vulners AI Score9.0

CVSS26.5

CVSS38.8

EPSS0.002

CWE-89