2 matches found
Debian Security Advisory DSA 1032-1 (zope-cmfplone)
The remote host is missing an update to zope-cmfplone announced via advisory DSA 1032-1. It was discovered that the Plone content management system lacks security declarations for three internal classes. This allows manipulation of user portraits by unprivileged users. The old stable distribution...
5CVSS0.4AI score0.03891EPSS
SaveExploits1
Debian DSA-1032-1 : zope-cmfplone - programming error
It was discovered that the Plone content management system lacks security declarations for three internal classes. This allows manipulation of user portraits by unprivileged users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
5CVSS5.3AI score0.03891EPSS
SaveExploits1References2
20