PYSEC-2018-72

2018-01-0318:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

28.6%

JSON

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5.

CPENameOperatorVersion
ploneeq5.0.6
ploneeq4.3.4
ploneeq5.0.2
ploneeq5.0.10
ploneeq5.0.9
ploneeq4.2.6
ploneeq4.0.2
ploneeq4.1.4
ploneeq4.1a1
ploneeq4.1