PYSEC-2017-81

2017-03-2316:59:00

Google

osv.dev

0.001 Low

EPSS

Percentile

40.4%

JSON

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method.

CPENameOperatorVersion
ploneeq5.0.6
ploneeq4.3.4
ploneeq5.0.2
ploneeq5.0a2
ploneeq4.2.6
ploneeq4.0.2
ploneeq4.1.4
ploneeq4.1a1
ploneeq4.1
ploneeq4.3a2