Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 4:49 a.m.28 views

Plone Privilege escalation due improper authorization

Multiple unspecified vulnerabilities in 1 dataitems.py, 2 get.py, and 3 traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors...

6.5CVSS6.7AI score0.01257EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder