Plone plone.app.contenttypes elevation of privilege vulnerability

Plone is free and open source content management system. Plone plone.app.contenttypes is vulnerable and can be exploited by a remote attacker to submit a special PUT request and elevate privileges...