CVE-2017-5524

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method...

Format string

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method...

CVE-2011-4030

The CVE-2011-4030 issue affects Plone CMFEditions 2.x in Plone 4.0.x–4.0.9, 4.1, and 4.2–4.2a2, where KwAsAttributes classes can be published, allowing remote attackers to access sub-objects via unspecified vectors. Root cause: CMFEditions did not prevent KwAsAttributes from being publishable. Im...

PYSEC-2011-25

Unspecified vulnerability in 1 Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and 2 PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability...