Lucene search

PRIOn knowledge basePRION:CVE-2024-23756

HistoryFeb 08, 2024 - 9:15 p.m.

Design/Logic Flaw

2024-02-0821:15:00

PRIOn knowledge base

www.prio-n.com

security vulnerability

plone

docker

unauthenticated access

file upload

file deletion

http put

http delete

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.8%

JSON

The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them.

CPENameOperatorVersion
ploneeq5.2.13

CPE	Name	Operator	Version
	plone	eq	5.2.13

References

github.com/c0d3x27/CVEs/tree/main/CVE-2024-23756