3 matches found
PYSEC-2014-66
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API...
Authentication flaw
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API...
CVE-2013-7061
CVE-2013-7061 affects Plone 3.3–4.3.2: the file Products/CMFPlone/CatalogTool.py in Plone allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API. Public references (NVD, GHSA, OSV) confirm the vulnerability in Plone’s CatalogTool.py. Exp...