Lucene search
PRIOn knowledge basePRION:CVE-2020-28736HistoryDec 30, 2020 - 7:15 p.m.
Design/Logic Flaw
2020-12-3019:15:00
PRIOn knowledge base
www.prio-n.com
5
Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).
Related
cve
cve
CVE-2020-28736
2020-12-30 19:15:13
osv
osv
CVE-2020-28736
2020-12-30 19:15:13
PYSEC-2020-248
2020-12-30 19:15:00
Improper Restriction of XML External Entity Reference in Plone
2021-04-07 21:14:00
nvd
nvd
CVE-2020-28736
2020-12-30 19:15:13
github
github
Improper Restriction of XML External Entity Reference in Plone
2021-04-07 21:14:00
cvelist
cvelist
CVE-2020-28736
2020-12-30 18:40:52
veracode
veracode
XML External Entity (XXE)
2021-01-01 06:46:28
openvas
openvas
Plone CMS < 5.2.3 Multiple Vulnerabilities
2021-01-15 00:00:00