PT-2020-17039

Name of the Vulnerable Software and Affected Versions Plone versions prior to 5.2.3 Description The issue allows XXE attacks via a feature protected by an unapplied permission of plone.schemaeditor.ManageSchemata, which is only available to the Manager role. Recommendations For versions prior to...