Lucene search
Veracode Vulnerability DatabaseVERACODE:22348HistoryJan 23, 2020 - 4:24 a.m.
Authorization Bypass
2020-01-2304:24:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.004 Low
EPSS
Percentile
72.7%
plone.app.contenttypes is vulnerable to authorization bypass. The vulnerability exists as a user might be able to use a PUT request to overwrite content without requiring the write permission.
| CPE | Name | Operator | Version |
|---|---|---|---|
| plone.app.contenttypes | le | 1.4.16 | |
| plone.app.contenttypes | le | 2.1.5 |
References
Related
osv
osv
Plone Unauthenticated Write Vulnerability
2022-05-24 17:07:14
CVE-2020-7941
2020-01-23 21:15:13
PYSEC-2020-90
2020-01-23 21:15:00
nvd
nvd
CVE-2020-7941
2020-01-23 21:15:13
cve
cve
CVE-2020-7941
2020-01-23 21:15:13
redhatcve
redhatcve
CVE-2020-7941
2020-02-04 20:18:16
cvelist
cvelist
CVE-2020-7941
2020-01-23 20:38:13
prion
prion
Privilege escalation
2020-01-23 21:15:00
github
github
Plone Unauthenticated Write Vulnerability
2022-05-24 17:07:14
nessus
nessus
RHEL 5 : plone (Unpatched Vulnerability)
2024-05-11 00:00:00