Lucene search
+L

2 matches found

OSV
OSV
added 2020/12/30 7:15 p.m.16 views

CVE-2020-28736

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

8.8CVSS7AI score0.01423EPSS
SaveExploits0References3
Prion
Prion
added 2020/12/30 7:15 p.m.18 views

Design/Logic Flaw

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

6.5CVSS8.5AI score0.01423EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder