PYSEC-2017-55

Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors...

Security feature bypass

Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors...

PYSEC-2017-57

Chameleon five.pt in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates...

Authentication flaw

Chameleon five.pt in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates...

CVE-2016-4041

Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors...

CVE-2016-4043

Chameleon five.pt in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates...

CVE-2016-4043

Chameleon five.pt in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates...

CVE-2016-4042

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors...

PYSEC-2017-56

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors...

CVE-2016-4041

Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors...

CVE-2016-4042

Plone CMS versions 3.3 through 5.1a1 are affected by CVE-2016-4042. The issue allows remote attackers to obtain the ID of sensitive content via unspecified vectors, constituting information disclosure. A validated remediation in connected sources indicates affected versions are before 4.3.10 (for...

CVE-2016-4041

Affected software/impact (from provided data): Plone 4.0–5.1a1 is vulnerable due to missing security declarations for Dexterity content-related WebDAV requests, enabling remote attackers to gain WebDAV access via unspecified vectors. Root cause: lack of proper security declarations for WebDAV han...

CVE-2016-4041

Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors...

CVE-2016-4043

CVE-2016-4043 affects Plone 5.0rc1–5.1a1 via Chameleon (five.pt); remote authenticated users can bypass Restricted Python by exploiting permissions to create or edit templates. Root cause: improper handling in template editing allows elevation of privileges within PloneFormGen contexts. Impact is...

CVE-2016-4042

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors...

CVE-2016-4042

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors...

CVE-2016-4043

Chameleon five.pt in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates...

CVE-2016-4043

Chameleon five.pt in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates...

PT-2017-8448

Name of the Vulnerable Software and Affected Versions Plone versions 4.0 through 5.1a1 Description The issue allows remote attackers to gain webdav access via unspecified vectors due to the lack of security declarations for Dexterity content-related WebDAV requests. Recommendations For Plone...

PT-2017-8449

Name of the Vulnerable Software and Affected Versions Plone versions 3.3 through 5.1a1 Plone versions 5.x before 5.0.5 and 3.3 before 4.3.10 can be consolidated into the above range for simplicity, but to maintain precision: Plone versions 3.3 through 4.3.9 Plone versions 5.x before 5.0.5...