Code injection

2017-09-2517:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.0%

Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses.

CPENameOperatorVersion
ploneeq3.3
ploneeq3.3.5
ploneeq3.3.4
ploneeq3.3.2
ploneeq3.3.1
ploneeq3.3.6
ploneeq3.3.3

Name	Operator	Version
plone	eq	3.3
plone	eq	3.3.5
plone	eq	3.3.4
plone	eq	3.3.2
plone	eq	3.3.1
plone	eq	3.3.6
plone	eq	3.3.3

References

www.openwall.com/lists/oss-security/2015/09/22/16

bugzilla.redhat.com/show_bug.cgi?id=1264796

plone.org/security/hotfix/20150910

plone.org/security/hotfix/20150910/header-injection