PYSEC-2017-52

2017-09-2517:29:00

Google

osv.dev

0.003 Low

EPSS

Percentile

69.7%

JSON

Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator.

CPENameOperatorVersion
ploneeq4.2
ploneeq5.0rc1
ploneeq4.2.7
ploneeq4.3.4
ploneeq4.3.5
ploneeq4.0.1
ploneeq5.0a2
ploneeq5.0b1
ploneeq5.0b3
ploneeq4.2.6