4 matches found
Plone Privilege escalation through exposed underlying API
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API...
5.5CVSS6.6AI score0.01315EPSS
SaveExploits0References9Affected Software2
CVE-2013-7061
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API...
5.5CVSS6.3AI score0.01315EPSS
SaveExploits0References3
20