Plone 3.3.x < 4.3.10 / 5.0.x < 5.0.5 Multiple Vulnerabilities (HF 20160419)

The version of Plone installed on the remote host is 3.3.x prior to 4.3.10, 5.0.x prior to 5.0.5. It is, therefore, affected by the following vulnerabilities: - Plone does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav...

PYSEC-2026-1874 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

Impact Via a type confusion bug in the CPython interpreter when using try/except RestrictedPython could be bypassed. We believe this should be fixed upstream in Python itself until that we remove support for try/except from RestrictedPython. It has been fixed for some Python versions. Patches...

Plone Security Bypass Vulnerability

Plone is the United States Plone Foundation's set of free and open source content management system CMS built on the application server Zope. A security vulnerability exists in Plone's five.pt file, which can be exploited by an attacker to bypass restricted Python with PloneFormGen template editi...