Code injection

2017-09-2517:29:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%

JSON

Kupu 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, and 4.2.0 through 4.2.7 allows remote authenticated users to edit Kupu settings.

CPENameOperatorVersion
kupule1.4.16
ploneeq3.3
ploneeq4.0.5
ploneeq4.2.3
ploneeq4.0.2
ploneeq3.3.5
ploneeq4.2.2
ploneeq4.0.8
ploneeq3.3.4
ploneeq4.0.7

Name	Operator	Version
kupu	le	1.4.16
plone	eq	3.3
plone	eq	4.0.5
plone	eq	4.2.3
plone	eq	4.0.2
plone	eq	3.3.5
plone	eq	4.2.2
plone	eq	4.0.8
plone	eq	3.3.4
plone	eq	4.0.7

Rows per page:

1-10 of 341

References

www.openwall.com/lists/oss-security/2015/09/22/15

bugzilla.redhat.com/show_bug.cgi?id=1264799

plone.org/security/hotfix/20150910

plone.org/security/hotfix/20150910/privilege-escalation-in-kupu