Plone Products.CMFCore < 2.7.1 / 3.x < 3.2 DoS

The version of Products.CMFCore installed on the remote host is prior to 2.7.1, or 3.x prior to 3.2. It is, therefore, affected by a denial of service vulnerability due to the use of Python's marshal module on unchecked input in a public method on PortalFolder objects. An unauthenticated, remote...

PT-2023-25705 · Python +3 · Python +3

Name of the Vulnerable Software and Affected Versions: Products.CMFCore versions prior to 3.2 Description: The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in...