Plone Docker - Host Header Injection

Plone Docker Official Image 5.2.13 5221 is vulnerable to Host Header Injection due to improper validation of input by the HOST headers. This can lead to Cross-Site Scripting XSS attacks when the malicious Host header value is reflected in the response. id: CVE-2024-23055 info: name: Plone Docker ...

PYSEC-2026-3497 plone.app.textfield: Stored XSS by spoofing mime type

Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...

Plone 2.5.x < 2.5.2 Multiple Vulnerabilities

The version of Plone installed on the remote host is 2.5.x prior to 2.5.2. It is, therefore, affected by the following vulnerabilities: - Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other...

Plone < 3.0.0 Multiple Vulnerabilities

The version of Plone installed on the remote host is prior to 3.0.0. It is, therefore, affected by the following vulnerabilities: - Plone places a base64 encoded form of the username and password in the ac cookie for the admin account, which makes it easier for remote attackers to obtain...

Plone RestrictedPython < 5.3 / 6.x < 6.1 RCE

The version of RestrictedPython installed on the remote host is prior to 5.3, or 6.x prior to 6.1. It is, therefore, affected by a remote code execution vulnerability due to not checking access to stack frames and their attributes. An authenticated, remote attacker can exploit this to bypass...

Plone 3.3.x < 4.3.3 Multiple Vulnerabilities (HF 20131210)

The version of Plone installed on the remote host is 3.3.x and prior to 4.3.3. It is, therefore, affected by the following vulnerabilitites: - Products/CMFPlone/FactoryTool.py is initialized in class scope. CVE-2013-7060 - Products/CMFPlone/CatalogTool.py allows remote administrators to bypass...

Plone 4.3 < 5.2.7 Reflected XSS and Open Redirect (HF 20220128)

The version of Plone installed on the remote host is 4.3 prior to 5.2.7. It is, therefore, affected by a reflected cross-site scripting XSS and open redirect vulnerability exists in 'Products.ATContentTypes'. An unauthenticated, remote attacker can get a compromised version of the...

Plone <= 4.1.3 DoS

The version of Plone installed on the remote host is less than or equal to 4.1.3. It is, therefore, affected by a denial of service vulnerability due to improper handling of hash values for form parameters to prevent hash collisions. An unauthenticated, remote attacker can exploit this issue, via...

Plone @plone/volto 14.0.0-alpha.5 < 15.0.0-alpha.0 Insecure Authentication

The version of the @plone/volto Node.js Package installed on the remote host is later than 14.0.0-alpha.5 prior to 15.0.0-alpha.0. It is, therefore, affected by an insecure authenticaiton vulnerability. A user could have their authentication cookie replaced with an authentication cookie from...

Plone < 3.3.6 XSS

The version of Plone installed on the remote host is prior to 3.3.6. It is, therefore, affected by a cross-site scripting XSS vulnerability, in PortalTransforms due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by...

Plone < 4.2.3 Multiple Vulnerabilities (HF 20121106)

The version of Plone installed on the remote host is prior to 4.2.3. It is, therefore, affected by the following vulnerabilities: - registerConfiglet.py in Plone allows remote attackers to execute Python code via unspecified vectors, related to the admin interface. CVE-2012-5485 -...

Plone 3.3.x < 4.3.12 / 5.0.x < 5.0.7 Multiple Vulnerabilities (HF 20160830)

The version of Plone installed on the remote host is 3.3.x prior to 4.3.12, or 5.0.x 5.0.7. It is, therefore, affected by the following vulnerabilities: - Directory traversal vulnerability in Plone CMS allows remote administrators to read arbitrary files via a .. dot dot in the path parameter in ...

Plone 4.x < 4.0.10 / 4.1.x < 4.1.1 Multiple Vulnerabilities (HF 20110928)

The version of Plone installed on the remote host is 4.x prior to 4.0.10 or 4.1.x prior to 4.1.1. It is, therefore, affected by the following vulnerabilities: - Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used allows remote attackers to execute arbitrary commands via vectors related t...

Plone Products.CMFCore < 2.7.1 / 3.x < 3.2 DoS

The version of Products.CMFCore installed on the remote host is prior to 2.7.1, or 3.x prior to 3.2. It is, therefore, affected by a denial of service vulnerability due to the use of Python's marshal module on unchecked input in a public method on PortalFolder objects. An unauthenticated, remote...

Plone 3.3.x < 4.3.7 Multiple Vulnerabilities (HF 20150910)

The version of Plone installed on the remote host is 3.3.x prior to 4.3.7. It is, therefore, affected by the following vulnerabilities: - Plone allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator CVE-2015-7315 -...

Plone < 3.3.6 / 4.0.x < 4.0.8 Privilege Escalation (HF 20110622)

The version of Plone installed on the remote host is prior to 3.3.6 or 4.0.x prior to 4.0.8. It is, therefore, affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to gain administrative access to the application. Note that Nessus has not tested f...

Plone < 3.1 XSRF

The version of Plone installed on the remote host is prior to 3.1.0. It is, therefore, affected by multiple cross-site request forgery vulnerabilities. A flaw exists, allowing remote attackers to add arbitrary accounts via the joinform page and change the privileges of arbitrary groups via the...

Plone products.isurlinportal < 2.1.0 / 3.x < 3.1.0 Open Redirect

The version of products.isurlinportal installed on the remote host is prior to 2.1.0, or 3.x prior to 3.1.0. It is, therefore, affected by an open redirect vulnerability. An unauthenticated, remote attacker, can exploit this, via the url /login?camefrom=////evil.example, to redirect to an externa...

Plone 2.0.x < 2.1.3 Insecure Access Control

The version of Plone installed on the remote host is 2.0.x prior to 2.1.3. It is, therefore, affected by an insecure access control due to not restricting access to the changeMemberPortrait, deletePersonalPortrait, and testCurrentPassword methods. An unauthenticated, remote attacker can exploit...

Plone 4.3.x < 5.2.5 Multiple Vulnerabilities (HF 20210518)

The version of Plone installed on the remote host is 4.3.x prior to 5.2.5. It is, therefore, affected by the following vulnerabilities: - Plone CMS has a stored Cross-Site Scripting XSS vulnerability in the user fullname property and the file upload functionality. CVE-2021-3313 -...