Plone 2.5.5 < 4.3.12 / 5.0.x < 5.0.7 Multiple Vulnerabilities (HF 20170117)

The version of Plone installed on the remote host is 2.5.5 prior to 4.3.12, or 5.0.x prior to 5.0.7. It is, therefore, affected by the following vulnerabilities: - Cross-site scripting XSS vulnerability in the managefindResult component in the search feature in Zope ZMI in Plone allows remote...

CVE-2026-32714

A SQL injection vulnerability was found in the KeyCache component of scitokens. The implementation constructs SQL queries using Python string formatting with user-controlled input such as issuer and key identifiers. An attacker could exploit this flaw by supplying crafted input that alters the...

python-jinja2: str.format_map allows sandbox escape

A flaw was found in Jinja. Python string formatting could allow an attacker to escape the sandbox. The highest threat from this vulnerability is to data confidentiality and integrity and system availability...