2 matches found
GHSA-MM32-JW73-9227 Plone is vulnerable to File System Path Exposure
The WYSIWYG component wysiwyg.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message...
6.3CVSS5.9AI score0.01216EPSS
SaveExploits0References7
Plone is vulnerable to File System Path Exposure
The WYSIWYG component wysiwyg.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message...
4.3CVSS5.9AI score0.01216EPSS
SaveExploits0References7Affected Software1
20