Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2022/05/17 4:30 a.m.•26 views

Plone contains Cross-site Request Forgery

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

4.3CVSS4.2AI score0.01097EPSS
SaveExploits0References11Affected Software1
OSV
OSV
•added 2022/05/17 4:30 a.m.•28 views

GHSA-2Q75-F7CP-W86Q Plone contains Cross-site Request Forgery

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

6.9CVSS6AI score0.01097EPSS
SaveExploits0References11
Mend
Mend
•added 2014/11/03 10:00 p.m.•5 views

CVE-2012-5500

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

6.3CVSS0.01097EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/03 12:00 a.m.•4 views

CVE-2012-5500: Cross-Site Request Forgery (CSRF)

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

4.3CVSS5.9AI score0.01097EPSS
SaveExploits0References2
Rows per page
Query Builder