PYSEC-2017-54

2017-09-2517:29:00

Google

osv.dev

0.003 Low

EPSS

Percentile

70.9%

Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses.

CPENameOperatorVersion
ploneeq3.3.3
ploneeq3.3.1
ploneeq3.3.4
ploneeq3.3.5
ploneeq3.3
ploneeq3.3.2
ploneeq3.3.6

Name	Operator	Version
plone	eq	3.3.3
plone	eq	3.3.1
plone	eq	3.3.4
plone	eq	3.3.5
plone	eq	3.3
plone	eq	3.3.2
plone	eq	3.3.6

References

www.openwall.com/lists/oss-security/2015/09/22/16

bugzilla.redhat.com/show_bug.cgi?id=1264796

plone.org/security/hotfix/20150910

plone.org/security/hotfix/20150910/header-injection

0.003 Low

EPSS

Percentile

70.9%

Related for OSV:PYSEC-2017-54