Plone 4.x < 4.0.10 / 4.1.x < 4.1.1 Multiple Vulnerabilities (HF 20110928)

The version of Plone installed on the remote host is 4.x prior to 4.0.10 or 4.1.x prior to 4.1.1. It is, therefore, affected by the following vulnerabilities: - Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used allows remote attackers to execute arbitrary commands via vectors related t...

GHSA-PWGM-JVQV-6V8P Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587...