2 matches found
Cross site request forgery (csrf)
The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...
4.3CVSS7AI score0.01088EPSS
SaveExploits0References5Affected Software1
PYSEC-2014-42
The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...
4.3CVSS4AI score0.01088EPSS
SaveExploits0References6
20