Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/5766?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/5766?format=api", "purl": "pkg:pypi/plone@3.3rc3", "type": "pypi", "namespace": "", "name": "plone", "version": "3.3rc3", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "5.2.5", "latest_non_vulnerable_version": "6.0.7", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7286?format=api", "vulnerability_id": "VCID-1sck-4684-wbbv", "summary": "kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5496", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00603", "scoring_system": "epss", "scoring_elements": "0.69881", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5496" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-38.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-38.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5496", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5496" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/12" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5876?format=api", "purl": "pkg:pypi/plone@3.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21n6-9mrg-2fdp" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-f2hn-g67h-kfgk" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/5888?format=api", "purl": "pkg:pypi/plone@4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-f2hn-g67h-kfgk" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-rv8k-q8hx-7yeb" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0" } ], "aliases": [ "CVE-2012-5496", "GHSA-gx6w-hcw3-5r37", "PYSEC-2014-38" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1sck-4684-wbbv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7523?format=api", "vulnerability_id": "VCID-311f-xecp-47fm", "summary": "Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000483", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52982", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000483" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-72.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-72.yaml" }, { "reference_url": "https://plone.org/security/hotfix/20171128/sandbox-escape", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20171128/sandbox-escape" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000483", "reference_id": "CVE-2017-1000483", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000483" }, { "reference_url": "https://github.com/advisories/GHSA-qc57-h2f7-p4hx", "reference_id": "GHSA-qc57-h2f7-p4hx", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qc57-h2f7-p4hx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8493?format=api", "purl": "pkg:pypi/plone@4.3.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/9366?format=api", "purl": "pkg:pypi/plone@5.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-c3we-w4qc-6fhs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0" } ], "aliases": [ "CVE-2017-1000483", "GHSA-qc57-h2f7-p4hx", "PYSEC-2018-72" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-311f-xecp-47fm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7217?format=api", "vulnerability_id": "VCID-31m2-mwzq-judc", "summary": "mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4198", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00305", "scoring_system": "epss", "scoring_elements": "0.54031", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4198" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978480", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978480" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-62.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-62.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4198", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4198" }, { "reference_url": "https://pypi.org/project/Products.PloneHotfix20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://pypi.org/project/Products.PloneHotfix20130618" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4198", "GHSA-qjxf-6pr8-j87v", "PYSEC-2014-62" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-31m2-mwzq-judc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8028?format=api", "vulnerability_id": "VCID-36xh-ua3s-gyfr", "summary": "Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28736", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00484", "scoring_system": "epss", "scoring_elements": "0.65579", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28736" }, { "reference_url": "https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt" }, { "reference_url": "https://github.com/advisories/GHSA-2c8c-84w2-j38j", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2c8c-84w2-j38j" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/issues/3209", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/issues/3209" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-248.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-248.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28736", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28736" }, { "reference_url": "https://www.misakikata.com/codes/plone/python-en.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.misakikata.com/codes/plone/python-en.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18282?format=api", "purl": "pkg:pypi/plone@5.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-ccuu-86vs-s3gs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3" } ], "aliases": [ "CVE-2020-28736", "GHSA-2c8c-84w2-j38j", "PYSEC-2020-248" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-36xh-ua3s-gyfr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8094?format=api", "vulnerability_id": "VCID-3n34-5rm7-nbcj", "summary": "Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33510", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0012", "scoring_system": "epss", "scoring_elements": "0.30603", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33510" }, { "reference_url": "https://github.com/advisories/GHSA-4mg4-wvmx-5332", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4mg4-wvmx-5332" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-82.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-82.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33510", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33510" }, { "reference_url": "https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-event-ical-url", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-event-ical-url" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/05/22/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/05/22/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20801?format=api", "purl": "pkg:pypi/plone@5.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5" } ], "aliases": [ "CVE-2021-33510", "GHSA-4mg4-wvmx-5332", "PYSEC-2021-82" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3n34-5rm7-nbcj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7274?format=api", "vulnerability_id": "VCID-3uw2-j3r6-77ch", "summary": "Cross-site scripting (XSS) vulnerability in python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to \"{u,}translate.\"", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5494", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00285", "scoring_system": "epss", "scoring_elements": "0.5217", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5494" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-36.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-36.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/10", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/10" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5494", "reference_id": "CVE-2012-5494", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5494" }, { "reference_url": "https://github.com/advisories/GHSA-3g6w-4m7x-97v6", "reference_id": "GHSA-3g6w-4m7x-97v6", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-3g6w-4m7x-97v6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5494", "GHSA-3g6w-4m7x-97v6", "PYSEC-2014-36" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3uw2-j3r6-77ch" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7285?format=api", "vulnerability_id": "VCID-3v6x-b2g3-fyhq", "summary": "z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5491", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00319", "scoring_system": "epss", "scoring_elements": "0.55221", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5491" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-33.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-33.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5491", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5491" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/07", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/07" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5491", "GHSA-f8pg-wp5j-rjxx", "PYSEC-2014-33" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3v6x-b2g3-fyhq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7522?format=api", "vulnerability_id": "VCID-43m1-jkv8-jygp", "summary": "A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000482", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00287", "scoring_system": "epss", "scoring_elements": "0.52428", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000482" }, { "reference_url": "https://github.com/plone/Products.CMFPlone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/issues/2232", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/issues/2232" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/2233", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/2233" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/2234", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/2234" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/2235", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/2235" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/2236", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/2236" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-71.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-71.yaml" }, { "reference_url": "https://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000482", "reference_id": "CVE-2017-1000482", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000482" }, { "reference_url": "https://github.com/advisories/GHSA-859j-668v-mrr6", "reference_id": "GHSA-859j-668v-mrr6", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-859j-668v-mrr6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8493?format=api", "purl": "pkg:pypi/plone@4.3.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/9366?format=api", "purl": "pkg:pypi/plone@5.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-c3we-w4qc-6fhs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0" } ], "aliases": [ "CVE-2017-1000482", "GHSA-859j-668v-mrr6", "PYSEC-2018-71" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-43m1-jkv8-jygp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7283?format=api", "vulnerability_id": "VCID-46az-51p2-yfdf", "summary": "gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5493", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0041", "scoring_system": "epss", "scoring_elements": "0.6159", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5493" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-35.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-35.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5493", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5493" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/09", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/09" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5493", "GHSA-25jh-5h5r-h33m", "PYSEC-2014-35" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-46az-51p2-yfdf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7288?format=api", "vulnerability_id": "VCID-4hzn-mj8g-37ew", "summary": "Cross-site scripting (XSS) vulnerability in widget_traversal.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5504", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00285", "scoring_system": "epss", "scoring_elements": "0.5217", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5504" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-46.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-46.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/20", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/20" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5504", "reference_id": "CVE-2012-5504", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5504" }, { "reference_url": "https://github.com/advisories/GHSA-5whw-5cmm-9jw4", "reference_id": "GHSA-5whw-5cmm-9jw4", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-5whw-5cmm-9jw4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5504", "GHSA-5whw-5cmm-9jw4", "PYSEC-2014-46" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4hzn-mj8g-37ew" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7102?format=api", "vulnerability_id": "VCID-4xdg-1sku-17cd", "summary": "Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.", "references": [ { "reference_url": "http://osvdb.org/72727", "reference_id": "", "reference_type": "", "scores": [], "url": "http://osvdb.org/72727" }, { "reference_url": "http://plone.org/products/plone/security/advisories/CVE-2011-1948", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/CVE-2011-1948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0151", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2012:0151" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1948", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.6749", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1948" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=711494", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=711494" }, { "reference_url": "http://secunia.com/advisories/44775", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/44775" }, { "reference_url": "http://secunia.com/advisories/44776", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/44776" }, { "reference_url": "http://securityreason.com/securityalert/8269", "reference_id": "", "reference_type": "", "scores": [], "url": "http://securityreason.com/securityalert/8269" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67693", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67693" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-14.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-14.yaml" }, { "reference_url": "http://www.securityfocus.com/archive/1/518155/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/archive/1/518155/100/0/threaded" }, { "reference_url": "http://www.securityfocus.com/bid/48005", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/48005" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2011-1948", "reference_id": "CVE-2011-1948", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2011-1948" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1948", "reference_id": "CVE-2011-1948", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1948" }, { "reference_url": "https://github.com/advisories/GHSA-p7h9-vf92-5fj5", "reference_id": "GHSA-p7h9-vf92-5fj5", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p7h9-vf92-5fj5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" } ], "aliases": [ "CVE-2011-1948", "GHSA-p7h9-vf92-5fj5", "PYSEC-2011-14" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4xdg-1sku-17cd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7281?format=api", "vulnerability_id": "VCID-4ym2-39bg-dbga", "summary": "ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1194", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2014:1194" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5486", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00821", "scoring_system": "epss", "scoring_elements": "0.74709", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5486" }, { "reference_url": "https://bugs.launchpad.net/zope2/+bug/930812", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugs.launchpad.net/zope2/+bug/930812" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=878939", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878939" }, { "reference_url": "https://github.com/advisories/GHSA-77hv-8796-8ccp", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-77hv-8796-8ccp" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-28.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-28.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-73.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-73.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/02", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/02" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2012-5486", "reference_id": "CVE-2012-5486", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2012-5486" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5486", "reference_id": "CVE-2012-5486", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5486" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5486", "GHSA-77hv-8796-8ccp", "PYSEC-2014-28", "PYSEC-2014-73" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4ym2-39bg-dbga" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7113?format=api", "vulnerability_id": "VCID-5bnw-ktd3-8qeb", "summary": "Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.", "references": [ { "reference_url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4462", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00925", "scoring_system": "epss", "scoring_elements": "0.76367", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4462" }, { "reference_url": "http://secunia.com/advisories/47406", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/47406" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72018", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72018" }, { "reference_url": "https://github.com/advisories/GHSA-pcwm-8jc3-qxvj", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pcwm-8jc3-qxvj" }, { "reference_url": "https://github.com/plone/plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-22.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-22.yaml" }, { "reference_url": "http://www.kb.cert.org/vuls/id/903934", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.kb.cert.org/vuls/id/903934" }, { "reference_url": "http://www.nruns.com/_downloads/advisory28122011.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.nruns.com/_downloads/advisory28122011.pdf" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4462", "reference_id": "CVE-2011-4462", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4462" }, { "reference_url": "http://www.ocert.org/advisories/ocert-2011-003.html", "reference_id": "CVE-2011-4885;OSVDB-78115", "reference_type": "exploit", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.ocert.org/advisories/ocert-2011-003.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5955?format=api", "purl": "pkg:pypi/plone@4.1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.4" } ], "aliases": [ "CVE-2011-4462", "GHSA-pcwm-8jc3-qxvj", "PYSEC-2011-22" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5bnw-ktd3-8qeb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8095?format=api", "vulnerability_id": "VCID-5e2c-6mkx-4udu", "summary": "Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33511", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00276", "scoring_system": "epss", "scoring_elements": "0.51216", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33511" }, { "reference_url": "https://github.com/advisories/GHSA-gc9g-67cq-p7v4", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gc9g-67cq-p7v4" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-83.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-83.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33511", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33511" }, { "reference_url": "https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/05/22/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/05/22/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20801?format=api", "purl": "pkg:pypi/plone@5.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5" } ], "aliases": [ "CVE-2021-33511", "GHSA-gc9g-67cq-p7v4", "PYSEC-2021-83" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5e2c-6mkx-4udu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7477?format=api", "vulnerability_id": "VCID-5tbn-qmuj-jya9", "summary": "Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.", "references": [ { "reference_url": "http://hyp3rlinx.altervista.org/advisories/AS-ZOPE-CSRF.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://hyp3rlinx.altervista.org/advisories/AS-ZOPE-CSRF.txt" }, { "reference_url": "http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-7293", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00332", "scoring_system": "epss", "scoring_elements": "0.56335", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-7293" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-51.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-51.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7293", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7293" }, { "reference_url": "https://plone.org/security/hotfix/20151006", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20151006" }, { "reference_url": "https://pypi.python.org/pypi/plone4.csrffixes", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://pypi.python.org/pypi/plone4.csrffixes" }, { "reference_url": "https://www.exploit-db.com/exploits/38411", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.exploit-db.com/exploits/38411" }, { "reference_url": "https://www.exploit-db.com/exploits/38411/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.exploit-db.com/exploits/38411/" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/webapps/38411.txt", "reference_id": "CVE-2015-7293;OSVDB-128533;OSVDB-128532", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/webapps/38411.txt" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8498?format=api", "purl": "pkg:pypi/plone@5.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0a1" } ], "aliases": [ "CVE-2015-7293", "GHSA-p3qm-44cf-f8qx", "PYSEC-2017-51" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5tbn-qmuj-jya9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8027?format=api", "vulnerability_id": "VCID-5z33-3pqj-gygw", "summary": "Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28734", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00484", "scoring_system": "epss", "scoring_elements": "0.65579", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28734" }, { "reference_url": "https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt" }, { "reference_url": "https://github.com/advisories/GHSA-wq6x-g685-w5f2", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-wq6x-g685-w5f2" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/issues/3209", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/issues/3209" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-246.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-246.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28734", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28734" }, { "reference_url": "https://www.misakikata.com/codes/plone/python-en.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.misakikata.com/codes/plone/python-en.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18282?format=api", "purl": "pkg:pypi/plone@5.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-ccuu-86vs-s3gs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3" } ], "aliases": [ "CVE-2020-28734", "GHSA-wq6x-g685-w5f2", "PYSEC-2020-246" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5z33-3pqj-gygw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7389?format=api", "vulnerability_id": "VCID-6898-z4k5-h3b6", "summary": "Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7147", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00299", "scoring_system": "epss", "scoring_elements": "0.53489", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7147" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-64.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-64.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7147", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7147" }, { "reference_url": "https://plone.org/security/hotfix/20170117", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20170117" }, { "reference_url": "https://plone.org/security/hotfix/20170117/non-persistent-xss-in-zope2", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20170117/non-persistent-xss-in-zope2" }, { "reference_url": "https://web.archive.org/web/20170214002551/http://www.securityfocus.com/bid/96117", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170214002551/http://www.securityfocus.com/bid/96117" }, { "reference_url": "https://www.curesec.com/blog/article/blog/Plone-XSS-186.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.curesec.com/blog/article/blog/Plone-XSS-186.html" }, { "reference_url": "http://www.curesec.com/blog/article/blog/Plone-XSS-186.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.curesec.com/blog/article/blog/Plone-XSS-186.html" }, { "reference_url": "http://www.securityfocus.com/bid/96117", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/96117" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8399?format=api", "purl": "pkg:pypi/plone@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/8400?format=api", "purl": "pkg:pypi/plone@5.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-c3we-w4qc-6fhs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-jn3b-smfx-87gg" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7" } ], "aliases": [ "CVE-2016-7147", "GHSA-84jm-cpc5-c7g7", "PYSEC-2017-64" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6898-z4k5-h3b6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7289?format=api", "vulnerability_id": "VCID-6rsz-krhe-q3gz", "summary": "ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5503", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00319", "scoring_system": "epss", "scoring_elements": "0.55221", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5503" }, { "reference_url": "https://github.com/advisories/GHSA-prr5-pfr8-q9f3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-prr5-pfr8-q9f3" }, { "reference_url": "https://github.com/plone/Products.CMFPlone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-45.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-45.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/19", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/19" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5503", "reference_id": "CVE-2012-5503", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5503" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5503", "GHSA-prr5-pfr8-q9f3", "PYSEC-2014-45" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6rsz-krhe-q3gz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7215?format=api", "vulnerability_id": "VCID-7mc8-x346-eyaq", "summary": "typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote attackers to hide fields on the forms via a crafted URL.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4193", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00309", "scoring_system": "epss", "scoring_elements": "0.54367", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4193" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978469", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978469" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-57.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-57.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4193", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4193" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4193", "GHSA-6fgf-x7wg-hp8r", "PYSEC-2014-57" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7mc8-x346-eyaq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7212?format=api", "vulnerability_id": "VCID-83xg-a5v4-4bcw", "summary": "(1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4199", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0048", "scoring_system": "epss", "scoring_elements": "0.65397", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4199" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978482", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978482" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-63.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-63.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4199", "reference_id": "CVE-2013-4199", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4199" }, { "reference_url": "https://github.com/advisories/GHSA-xfjq-9rxq-ph6m", "reference_id": "GHSA-xfjq-9rxq-ph6m", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-xfjq-9rxq-ph6m" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4199", "GHSA-xfjq-9rxq-ph6m", "PYSEC-2014-63" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-83xg-a5v4-4bcw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7277?format=api", "vulnerability_id": "VCID-8gk5-28z6-7bcf", "summary": "atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5505", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00319", "scoring_system": "epss", "scoring_elements": "0.55221", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5505" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-47.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-47.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5505", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5505" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/21", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/21" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5505", "GHSA-cq5g-924m-7fxh", "PYSEC-2014-47" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8gk5-28z6-7bcf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7282?format=api", "vulnerability_id": "VCID-8j8e-z731-7fbz", "summary": "Cross-site scripting (XSS) vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5490", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00285", "scoring_system": "epss", "scoring_elements": "0.5217", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5490" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-32.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-32.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5490", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5490" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/06", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/06" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5490", "GHSA-q46g-v7r4-9vhr", "PYSEC-2014-32" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8j8e-z731-7fbz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7279?format=api", "vulnerability_id": "VCID-8md9-zymx-w7cn", "summary": "membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1194", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2014:1194" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2012-5497", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2012-5497" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5497", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00435", "scoring_system": "epss", "scoring_elements": "0.63162", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5497" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=874681", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874681" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/a9479a5b38646fe0b0a9066ee46de9c18de32bfa", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/a9479a5b38646fe0b0a9066ee46de9c18de32bfa" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/c3a98f4e6cf26501485de9c8354c49afdea21df8", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/c3a98f4e6cf26501485de9c8354c49afdea21df8" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-39.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-39.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5497", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5497" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/13", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/13" }, { "reference_url": "https://web.archive.org/web/20131103175056/https://plone.org/products/plone/security/advisories/20121106/13", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20131103175056/https://plone.org/products/plone/security/advisories/20121106/13" }, { "reference_url": "https://web.archive.org/web/20131114082527/https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20131114082527/https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5497", "GHSA-683w-84m7-p8pw", "PYSEC-2014-39" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8md9-zymx-w7cn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7214?format=api", "vulnerability_id": "VCID-8r52-vc7e-f3bc", "summary": "zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote attackers to obtain sensitive information by reading a generated archive.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4191", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00309", "scoring_system": "epss", "scoring_elements": "0.54367", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4191" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978453", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978453" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-55.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-55.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4191", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4191" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4191", "GHSA-grwx-4p5v-9g2g", "PYSEC-2014-55" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8r52-vc7e-f3bc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7301?format=api", "vulnerability_id": "VCID-99bf-ybqh-dfad", "summary": "The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1194", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2014:1194" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2012-5500", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2012-5500" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5500", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00343", "scoring_system": "epss", "scoring_elements": "0.57184", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5500" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=874649", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874649" }, { "reference_url": "https://github.com/plone/plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-42.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-42.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5500", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5500" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/16", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/16" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5500", "GHSA-2q75-f7cp-w86q", "PYSEC-2014-42" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-99bf-ybqh-dfad" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8100?format=api", "vulnerability_id": "VCID-9ze6-mfrw-ukdv", "summary": "Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33513", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00302", "scoring_system": "epss", "scoring_elements": "0.53803", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33513" }, { "reference_url": "https://github.com/advisories/GHSA-fj67-w3m4-rfmp", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fj67-w3m4-rfmp" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-85.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-85.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33513", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33513" }, { "reference_url": "https://plone.org/security/hotfix/20210518/xss-vulnerability-in-cmfdifftool", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/xss-vulnerability-in-cmfdifftool" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/05/22/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/05/22/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20801?format=api", "purl": "pkg:pypi/plone@5.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5" } ], "aliases": [ "CVE-2021-33513", "GHSA-fj67-w3m4-rfmp", "PYSEC-2021-85" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9ze6-mfrw-ukdv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7222?format=api", "vulnerability_id": "VCID-a628-5uyk-w3ca", "summary": "Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4189", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00498", "scoring_system": "epss", "scoring_elements": "0.66192", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4189" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978450", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978450" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-53.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-53.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4189", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4189" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4189", "GHSA-pwpq-632g-h49g", "PYSEC-2014-53" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a628-5uyk-w3ca" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7202?format=api", "vulnerability_id": "VCID-bj9p-4wzt-47cf", "summary": "The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allow_external_login_sites filtering property, redirect users to arbitrary web sites, and conduct phishing attacks via a space before a URL in the \"next\" parameter to acl_users/credentials_cookie_auth/require_login.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4200", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05344", "scoring_system": "epss", "scoring_elements": "0.90209", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4200" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4200", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4200" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-64.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-64.yaml" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2013/08/01/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2013/08/01/2" }, { "reference_url": "http://www.securityfocus.com/archive/1/530787/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/archive/1/530787/100/0/threaded" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4200", "reference_id": "CVE-2013-4200", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4200" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/webapps/38738.txt", "reference_id": "CVE-2013-4200;OSVDB-95863", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/webapps/38738.txt" }, { "reference_url": "https://www.securityfocus.com/bid/61964/info", "reference_id": "CVE-2013-4200;OSVDB-95863", "reference_type": "exploit", "scores": [], "url": "https://www.securityfocus.com/bid/61964/info" }, { "reference_url": "https://github.com/advisories/GHSA-56p3-rrp4-2j82", "reference_id": "GHSA-56p3-rrp4-2j82", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-56p3-rrp4-2j82" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4200", "GHSA-56p3-rrp4-2j82", "PYSEC-2014-64" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bj9p-4wzt-47cf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7271?format=api", "vulnerability_id": "VCID-ch1t-qmtc-xqfx", "summary": "uid_catalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5492", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00319", "scoring_system": "epss", "scoring_elements": "0.55221", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5492" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-34.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-34.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5492", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5492" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/08", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/08" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5492", "GHSA-6w93-4c4p-xv2x", "PYSEC-2014-34" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ch1t-qmtc-xqfx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8097?format=api", "vulnerability_id": "VCID-d68e-uehc-nudc", "summary": "Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33509", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00846", "scoring_system": "epss", "scoring_elements": "0.75136", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33509" }, { "reference_url": "https://github.com/advisories/GHSA-hm2p-fhwx-9285", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hm2p-fhwx-9285" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-81.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-81.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33509", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33509" }, { "reference_url": "https://plone.org/security/hotfix/20210518/writing-arbitrary-files-via-docutils-and-python-script", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/writing-arbitrary-files-via-docutils-and-python-script" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/05/22/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/05/22/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20801?format=api", "purl": "pkg:pypi/plone@5.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5" } ], "aliases": [ "CVE-2021-33509", "GHSA-hm2p-fhwx-9285", "PYSEC-2021-81" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d68e-uehc-nudc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7090?format=api", "vulnerability_id": "VCID-f2hn-g67h-kfgk", "summary": "Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.", "references": [ { "reference_url": "http://osvdb.org/70753", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://osvdb.org/70753" }, { "reference_url": "http://plone.org/products/plone/security/advisories/cve-2011-0720", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/cve-2011-0720" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-0720", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01407", "scoring_system": "epss", "scoring_elements": "0.80795", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-0720" }, { "reference_url": "http://secunia.com/advisories/43146", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/43146" }, { "reference_url": "http://secunia.com/advisories/43914", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/43914" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65099", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65099" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-13.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-13.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0720", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0720" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/CVE-2011-0720/logchecker.py", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/CVE-2011-0720/logchecker.py" }, { "reference_url": "https://seclists.org/fulldisclosure/2011/Apr/293", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://seclists.org/fulldisclosure/2011/Apr/293" }, { "reference_url": "https://web.archive.org/web/20110505051314/http://secunia.com/advisories/43914", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20110505051314/http://secunia.com/advisories/43914" }, { "reference_url": "https://web.archive.org/web/20110826134658/http://secunia.com/advisories/43146", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20110826134658/http://secunia.com/advisories/43146" }, { "reference_url": "https://web.archive.org/web/20200229153953/http://www.securityfocus.com/bid/46102", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200229153953/http://www.securityfocus.com/bid/46102" }, { "reference_url": "http://www.redhat.com/support/errata/RHSA-2011-0393.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.redhat.com/support/errata/RHSA-2011-0393.html" }, { "reference_url": "http://www.redhat.com/support/errata/RHSA-2011-0394.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.redhat.com/support/errata/RHSA-2011-0394.html" }, { "reference_url": "http://www.securityfocus.com/bid/46102", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/46102" }, { "reference_url": "http://www.securitytracker.com/id?1025258", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id?1025258" }, { "reference_url": "http://www.vupen.com/english/advisories/2011/0796", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2011/0796" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5889?format=api", "purl": "pkg:pypi/plone@4.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/5906?format=api", "purl": "pkg:pypi/plone@4.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.4" } ], "aliases": [ "CVE-2011-0720", "GHSA-3v28-9jjp-4g5w", "PYSEC-2011-13" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f2hn-g67h-kfgk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7223?format=api", "vulnerability_id": "VCID-fd6y-2fcd-jbck", "summary": "traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to \"retrieving information for certain resources.\"", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" }, { "value": "5.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" }, { "value": "5.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4188", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00564", "scoring_system": "epss", "scoring_elements": "0.68724", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4188" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978449", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" }, { "value": "5.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978449" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" }, { "value": "5.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" }, { "value": "5.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-52.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" }, { "value": "5.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-52.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4188", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" }, { "value": "5.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4188" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4188", "GHSA-w3pw-qxjj-6prr", "PYSEC-2014-52" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fd6y-2fcd-jbck" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7524?format=api", "vulnerability_id": "VCID-fga8-ymex-67fw", "summary": "By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login form and login, then get redirected to the specific url, and then get a second redirect to the attacker website. (The specific url can be seen by inspecting the hotfix code, but we don't want to make it too easy for attackers by spelling it out here.)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000484", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00197", "scoring_system": "epss", "scoring_elements": "0.41478", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000484" }, { "reference_url": "https://github.com/advisories/GHSA-xvwv-6wvx-px9x", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xvwv-6wvx-px9x" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/issues/2232", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/issues/2232" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-73.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-73.yaml" }, { "reference_url": "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000484", "reference_id": "CVE-2017-1000484", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000484" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8493?format=api", "purl": "pkg:pypi/plone@4.3.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/9366?format=api", "purl": "pkg:pypi/plone@5.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-c3we-w4qc-6fhs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0" } ], "aliases": [ "CVE-2017-1000484", "GHSA-xvwv-6wvx-px9x", "PYSEC-2018-73" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fga8-ymex-67fw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7276?format=api", "vulnerability_id": "VCID-hzgj-wca9-z3d1", "summary": "queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1194", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2014:1194" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5498", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01001", "scoring_system": "epss", "scoring_elements": "0.77305", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5498" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=874665", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874665" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-40.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-40.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/14", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/14" }, { "reference_url": "https://web.archive.org/web/20130528001715/https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20130528001715/https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://web.archive.org/web/20131103191705/https://plone.org/products/plone/security/advisories/20121106/14", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20131103191705/https://plone.org/products/plone/security/advisories/20121106/14" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/09/7", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/09/7" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2012-5498", "reference_id": "CVE-2012-5498", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2012-5498" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5498", "reference_id": "CVE-2012-5498", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5498" }, { "reference_url": "https://github.com/advisories/GHSA-97rj-p794-wq6m", "reference_id": "GHSA-97rj-p794-wq6m", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-97rj-p794-wq6m" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5498", "GHSA-97rj-p794-wq6m", "PYSEC-2014-40" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hzgj-wca9-z3d1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7275?format=api", "vulnerability_id": "VCID-jhc2-yux7-vybj", "summary": "python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to \"go_back.\"", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5495", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00638", "scoring_system": "epss", "scoring_elements": "0.70824", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5495" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-37.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-37.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5495", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5495" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/11", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/11" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5495", "GHSA-w6pw-5gh5-4952", "PYSEC-2014-37" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jhc2-yux7-vybj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7302?format=api", "vulnerability_id": "VCID-k34d-p9vb-g7by", "summary": "The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG reseeding issue in Zope.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5508", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00357", "scoring_system": "epss", "scoring_elements": "0.58221", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5508" }, { "reference_url": "https://bugs.launchpad.net/zope2/+bug/1071067", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugs.launchpad.net/zope2/+bug/1071067" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-50.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-50.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121124", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121124" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/24", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/24" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5508", "reference_id": "CVE-2012-5508", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5508" }, { "reference_url": "https://github.com/advisories/GHSA-wprr-mc54-c62q", "reference_id": "GHSA-wprr-mc54-c62q", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-wprr-mc54-c62q" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5508", "GHSA-wprr-mc54-c62q", "PYSEC-2014-50" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k34d-p9vb-g7by" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7291?format=api", "vulnerability_id": "VCID-kak6-5sps-z3da", "summary": "python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1194", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2014:1194" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2012-5488", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2012-5488" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5488", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0064", "scoring_system": "epss", "scoring_elements": "0.70887", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5488" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=878945", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878945" }, { "reference_url": "https://github.com/plone/Products.CMFPlone", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/a9479a5b38646fe0b0a9066ee46de9c18de32bfa", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/a9479a5b38646fe0b0a9066ee46de9c18de32bfa" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/c3a98f4e6cf26501485de9c8354c49afdea21df8", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/c3a98f4e6cf26501485de9c8354c49afdea21df8" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-30.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-30.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5488", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5488" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/04", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/04" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5488", "GHSA-cxw7-85xm-3xrc", "PYSEC-2014-30" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kak6-5sps-z3da" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7100?format=api", "vulnerability_id": "VCID-kmd1-vu9u-d7g4", "summary": "plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.", "references": [ { "reference_url": "http://osvdb.org/72729", "reference_id": "", "reference_type": "", "scores": [], "url": "http://osvdb.org/72729" }, { "reference_url": "http://plone.org/products/plone/security/advisories/CVE-2011-1950", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/CVE-2011-1950" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1950", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00762", "scoring_system": "epss", "scoring_elements": "0.73669", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1950" }, { "reference_url": "http://secunia.com/advisories/44775", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/44775" }, { "reference_url": "http://securityreason.com/securityalert/8269", "reference_id": "", "reference_type": "", "scores": [], "url": "http://securityreason.com/securityalert/8269" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67695", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67695" }, { "reference_url": "https://github.com/advisories/GHSA-2qx8-589j-gcpx", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2qx8-589j-gcpx" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-16.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-16.yaml" }, { "reference_url": "http://www.securityfocus.com/archive/1/518155/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/archive/1/518155/100/0/threaded" }, { "reference_url": "http://www.securityfocus.com/bid/48005", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/48005" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1950", "reference_id": "CVE-2011-1950", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1950" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5908?format=api", "purl": "pkg:pypi/plone@4.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" } ], "aliases": [ "CVE-2011-1950", "GHSA-2qx8-589j-gcpx", "PYSEC-2011-16" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kmd1-vu9u-d7g4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7272?format=api", "vulnerability_id": "VCID-kvvr-zc1s-akhn", "summary": "The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5487", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00656", "scoring_system": "epss", "scoring_elements": "0.71361", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5487" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-29.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-29.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5487", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5487" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/03", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/03" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "6.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5487", "GHSA-9m4g-f42q-vrrh", "PYSEC-2014-29" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kvvr-zc1s-akhn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7287?format=api", "vulnerability_id": "VCID-mgpa-1taj-pycj", "summary": "at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types via a crafted URL.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5501", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00319", "scoring_system": "epss", "scoring_elements": "0.55221", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5501" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-43.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-43.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5501", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5501" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/17", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/17" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5501", "GHSA-pvhv-qwc8-r2pg", "PYSEC-2014-43" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mgpa-1taj-pycj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7278?format=api", "vulnerability_id": "VCID-pncb-4m8u-hbaw", "summary": "AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5507", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00276", "scoring_system": "epss", "scoring_elements": "0.51249", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5507" }, { "reference_url": "https://bugs.launchpad.net/zope2/+bug/1071067", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugs.launchpad.net/zope2/+bug/1071067" }, { "reference_url": "https://github.com/advisories/GHSA-3qpr-7rmg-73v8", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3qpr-7rmg-73v8" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-49.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-49.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-75.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-75.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/23", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/23" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5507", "reference_id": "CVE-2012-5507", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5507" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5507", "GHSA-3qpr-7rmg-73v8", "PYSEC-2014-49", "PYSEC-2014-75" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pncb-4m8u-hbaw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8098?format=api", "vulnerability_id": "VCID-pv2n-2y41-pbg5", "summary": "Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33507", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00285", "scoring_system": "epss", "scoring_elements": "0.52225", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33507" }, { "reference_url": "https://github.com/advisories/GHSA-35rg-466w-77h3", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-35rg-466w-77h3" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-79.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-79.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33507", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33507" }, { "reference_url": "https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/05/22/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/05/22/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20801?format=api", "purl": "pkg:pypi/plone@5.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5" } ], "aliases": [ "CVE-2021-33507", "GHSA-35rg-466w-77h3", "PYSEC-2021-79" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pv2n-2y41-pbg5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7101?format=api", "vulnerability_id": "VCID-qkv2-qpe2-97cx", "summary": "Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.", "references": [ { "reference_url": "http://osvdb.org/72728", "reference_id": "", "reference_type": "", "scores": [], "url": "http://osvdb.org/72728" }, { "reference_url": "http://plone.org/products/plone/security/advisories/CVE-2011-1949", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/CVE-2011-1949" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1949", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00375", "scoring_system": "epss", "scoring_elements": "0.59413", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1949" }, { "reference_url": "http://secunia.com/advisories/44775", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/44775" }, { "reference_url": "http://secunia.com/advisories/44776", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/44776" }, { "reference_url": "http://securityreason.com/securityalert/8269", "reference_id": "", "reference_type": "", "scores": [], "url": "http://securityreason.com/securityalert/8269" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67694", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67694" }, { "reference_url": "https://github.com/advisories/GHSA-h6hq-c896-w882", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h6hq-c896-w882" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-15.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-15.yaml" }, { "reference_url": "http://www.securityfocus.com/archive/1/518155/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/archive/1/518155/100/0/threaded" }, { "reference_url": "http://www.securityfocus.com/bid/48005", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/48005" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1949", "reference_id": "CVE-2011-1949", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1949" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5876?format=api", "purl": "pkg:pypi/plone@3.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21n6-9mrg-2fdp" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-f2hn-g67h-kfgk" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/5908?format=api", "purl": "pkg:pypi/plone@4.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" } ], "aliases": [ "CVE-2011-1949", "GHSA-h6hq-c896-w882", "PYSEC-2011-15" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qkv2-qpe2-97cx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7220?format=api", "vulnerability_id": "VCID-qskf-bt81-5bbe", "summary": "The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote attackers to obtain sensitive information via a crafted request.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4196", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00319", "scoring_system": "epss", "scoring_elements": "0.55221", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4196" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978475", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978475" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-60.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-60.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4196", "reference_id": "CVE-2013-4196", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4196" }, { "reference_url": "https://github.com/advisories/GHSA-qphh-5fv5-2mjj", "reference_id": "GHSA-qphh-5fv5-2mjj", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-qphh-5fv5-2mjj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4196", "GHSA-qphh-5fv5-2mjj", "PYSEC-2014-60" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qskf-bt81-5bbe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8096?format=api", "vulnerability_id": "VCID-r874-3h26-j3fp", "summary": "Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33508", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00272", "scoring_system": "epss", "scoring_elements": "0.5084", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33508" }, { "reference_url": "https://github.com/advisories/GHSA-rmpv-rcp6-v8wc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rmpv-rcp6-v8wc" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-80.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-80.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33508", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33508" }, { "reference_url": "https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/05/22/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/05/22/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20801?format=api", "purl": "pkg:pypi/plone@5.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5" } ], "aliases": [ "CVE-2021-33508", "GHSA-rmpv-rcp6-v8wc", "PYSEC-2021-80" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r874-3h26-j3fp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7218?format=api", "vulnerability_id": "VCID-rn4s-px1y-7fbc", "summary": "The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4194", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00319", "scoring_system": "epss", "scoring_elements": "0.55221", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4194" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978470", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978470" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-58.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-58.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4194", "reference_id": "CVE-2013-4194", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4194" }, { "reference_url": "https://github.com/advisories/GHSA-mm32-jw73-9227", "reference_id": "GHSA-mm32-jw73-9227", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-mm32-jw73-9227" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4194", "GHSA-mm32-jw73-9227", "PYSEC-2014-58" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rn4s-px1y-7fbc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8092?format=api", "vulnerability_id": "VCID-sa7x-wvn1-skh1", "summary": "Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and allows an attacker to execute JavaScript in the context of the victim's browser if the victim opens a vulnerable page containing an XSS payload.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3313", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00444", "scoring_system": "epss", "scoring_elements": "0.6367", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3313" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-78.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-78.yaml" }, { "reference_url": "https://plone.org/download/releases/5.2.3", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/download/releases/5.2.3" }, { "reference_url": "https://plone.org/security/hotfix/20210518", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518" }, { "reference_url": "https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html" }, { "reference_url": "https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname" }, { "reference_url": "https://www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/05/22/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/05/22/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3313", "reference_id": "CVE-2021-3313", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3313" }, { "reference_url": "https://github.com/advisories/GHSA-hprr-4vfq-fcxw", "reference_id": "GHSA-hprr-4vfq-fcxw", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hprr-4vfq-fcxw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20765?format=api", "purl": "pkg:pypi/plone@5.2.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.4" } ], "aliases": [ "CVE-2021-3313", "GHSA-hprr-4vfq-fcxw", "PYSEC-2021-78" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sa7x-wvn1-skh1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7303?format=api", "vulnerability_id": "VCID-scgs-bz44-ebfk", "summary": "Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-6661", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.61148", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-6661" }, { "reference_url": "https://bugs.launchpad.net/zope2/+bug/1071067", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugs.launchpad.net/zope2/+bug/1071067" }, { "reference_url": "https://github.com/advisories/GHSA-48vv-2pmq-9fvv", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-48vv-2pmq-9fvv" }, { "reference_url": "https://github.com/plone/Products.CMFPlone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-51.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-51.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-76.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-76.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121124", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121124" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/24", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/24" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6661", "reference_id": "CVE-2012-6661", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6661" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-6661", "GHSA-48vv-2pmq-9fvv", "PYSEC-2014-51", "PYSEC-2014-76" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-scgs-bz44-ebfk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7211?format=api", "vulnerability_id": "VCID-swq8-17qu-vyfw", "summary": "Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4195", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00285", "scoring_system": "epss", "scoring_elements": "0.5217", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4195" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978471", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978471" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-59.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-59.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4195", "reference_id": "CVE-2013-4195", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4195" }, { "reference_url": "https://github.com/advisories/GHSA-j67j-8hrp-76xm", "reference_id": "GHSA-j67j-8hrp-76xm", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-j67j-8hrp-76xm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4195", "GHSA-j67j-8hrp-76xm", "PYSEC-2014-59" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-swq8-17qu-vyfw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8099?format=api", "vulnerability_id": "VCID-tfmu-7tad-xbbe", "summary": "Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33512", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00302", "scoring_system": "epss", "scoring_elements": "0.53803", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33512" }, { "reference_url": "https://github.com/advisories/GHSA-hm2h-f456-6j88", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hm2h-f456-6j88" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-84.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-84.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33512", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33512" }, { "reference_url": "https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/05/22/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/05/22/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20801?format=api", "purl": "pkg:pypi/plone@5.2.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5" } ], "aliases": [ "CVE-2021-33512", "GHSA-hm2h-f456-6j88", "PYSEC-2021-84" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tfmu-7tad-xbbe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7284?format=api", "vulnerability_id": "VCID-u1hz-5a2a-ybac", "summary": "python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (memory consumption) via a large value, related to formatColumns.", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1194", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2014:1194" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2012-5499", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2012-5499" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5499", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00887", "scoring_system": "epss", "scoring_elements": "0.75816", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5499" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=874657", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874657" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-41.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-41.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5499", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5499" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/15", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/15" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5499", "GHSA-wrf2-2rch-cmr9", "PYSEC-2014-41" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u1hz-5a2a-ybac" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7290?format=api", "vulnerability_id": "VCID-uduq-ujbb-6qd2", "summary": "python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5506", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00603", "scoring_system": "epss", "scoring_elements": "0.69881", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5506" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-48.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-48.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/22", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/22" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5506", "reference_id": "CVE-2012-5506", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5506" }, { "reference_url": "https://github.com/advisories/GHSA-79hj-474h-v4xv", "reference_id": "GHSA-79hj-474h-v4xv", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-79hj-474h-v4xv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5506", "GHSA-79hj-474h-v4xv", "PYSEC-2014-48" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uduq-ujbb-6qd2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7407?format=api", "vulnerability_id": "VCID-ugq4-1vzc-6uh5", "summary": "Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5524", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.39983", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5524" }, { "reference_url": "https://github.com/advisories/GHSA-p5wr-vp8g-q5p4", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p5wr-vp8g-q5p4" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/a7d47692058e10ce89968e7ca4dacbdf44fcad4f", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/a7d47692058e10ce89968e7ca4dacbdf44fcad4f" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/1912", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/1912" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-81.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-81.yaml" }, { "reference_url": "https://plone.org/security/hotfix/20170117/sandbox-escape", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20170117/sandbox-escape" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2017/01/18/6", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2017/01/18/6" }, { "reference_url": "http://www.securityfocus.com/bid/95679", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/95679" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5524", "reference_id": "CVE-2017-5524", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5524" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8399?format=api", "purl": "pkg:pypi/plone@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/8400?format=api", "purl": "pkg:pypi/plone@5.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-c3we-w4qc-6fhs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-jn3b-smfx-87gg" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/9360?format=api", "purl": "pkg:pypi/plone@5.1b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-c3we-w4qc-6fhs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1b1" } ], "aliases": [ "CVE-2017-5524", "GHSA-p5wr-vp8g-q5p4", "PYSEC-2017-81" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ugq4-1vzc-6uh5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7221?format=api", "vulnerability_id": "VCID-uv7n-awe5-2fav", "summary": "Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4190", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00256", "scoring_system": "epss", "scoring_elements": "0.49124", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4190" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978451", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978451" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-54.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-54.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4190", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4190" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4190", "GHSA-89rq-27xp-vgv7", "PYSEC-2014-54" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uv7n-awe5-2fav" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7270?format=api", "vulnerability_id": "VCID-vc1v-xsbc-kff1", "summary": "The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 2.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5489", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00575", "scoring_system": "epss", "scoring_elements": "0.69076", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5489" }, { "reference_url": "https://bugs.launchpad.net/zope2/+bug/1079238", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugs.launchpad.net/zope2/+bug/1079238" }, { "reference_url": "https://github.com/advisories/GHSA-879r-7f3w-8jj3", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-879r-7f3w-8jj3" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-31.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-31.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-74.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-74.yaml" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/05", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/05" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5489", "reference_id": "CVE-2012-5489", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5489" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5489", "GHSA-879r-7f3w-8jj3", "PYSEC-2014-31", "PYSEC-2014-74" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vc1v-xsbc-kff1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10781?format=api", "vulnerability_id": "VCID-w2u3-bnqq-mqfz", "summary": "User information disclosure\nA vulnerability allows unauthorized disclosure of registered user information.", "references": [ { "reference_url": "https://plone.org/products/plone/security/advisories/20151208-announcement", "reference_id": "", "reference_type": "", "scores": [], "url": "https://plone.org/products/plone/security/advisories/20151208-announcement" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8388?format=api", "purl": "pkg:pypi/plone@4.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/8393?format=api", "purl": "pkg:pypi/plone@5.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-c3we-w4qc-6fhs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-jn3b-smfx-87gg" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.1" } ], "aliases": [ "GMS-2015-51" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w2u3-bnqq-mqfz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7280?format=api", "vulnerability_id": "VCID-xksv-mub7-dyck", "summary": "registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1194.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1194", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2014:1194" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2012-5485", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2012-5485" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5485", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00599", "scoring_system": "epss", "scoring_elements": "0.69755", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5485" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=878934", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878934" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-27.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-27.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5485", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5485" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/01", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/01" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5485", "GHSA-7hxc-mwx7-5hmc", "PYSEC-2014-27" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xksv-mub7-dyck" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7273?format=api", "vulnerability_id": "VCID-xpjk-k6tj-2uba", "summary": "Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5502", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00152", "scoring_system": "epss", "scoring_elements": "0.35523", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-5502" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-44.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-44.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5502", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5502" }, { "reference_url": "https://plone.org/products/plone-hotfix/releases/20121106", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone-hotfix/releases/20121106" }, { "reference_url": "https://plone.org/products/plone/security/advisories/20121106/18", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/products/plone/security/advisories/20121106/18" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/11/10/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/11/10/1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6670?format=api", "purl": "pkg:pypi/plone@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/6924?format=api", "purl": "pkg:pypi/plone@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1" } ], "aliases": [ "CVE-2012-5502", "GHSA-hr59-35cr-qf43", "PYSEC-2014-44" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xpjk-k6tj-2uba" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7521?format=api", "vulnerability_id": "VCID-y2bq-cb4v-mke6", "summary": "When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by letting you click on a specially crafted link. You would login, and get redirected to the site of the attacker, letting you think that you are still on the original Plone site. Or some javascript of the attacker could be executed. Most of these types of attacks are already blocked by Plone, using the `isURLInPortal` check to make sure we only redirect to a page on the same Plone site. But a few more ways of tricking Plone into accepting a malicious link were discovered, and fixed with this hotfix.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000481", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00197", "scoring_system": "epss", "scoring_elements": "0.41478", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000481" }, { "reference_url": "https://github.com/plone/Products.CMFPlone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/issues/2232", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/issues/2232" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/2233", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/2233" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/2234", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/2234" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/2235", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/2235" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/pull/2236", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/pull/2236" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-70.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-70.yaml" }, { "reference_url": "https://plone.org/security/hotfix/20171128/open-redirection-on-login-form", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://plone.org/security/hotfix/20171128/open-redirection-on-login-form" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000481", "reference_id": "CVE-2017-1000481", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000481" }, { "reference_url": "https://github.com/advisories/GHSA-8g72-gq68-6gqh", "reference_id": "GHSA-8g72-gq68-6gqh", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-8g72-gq68-6gqh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8493?format=api", "purl": "pkg:pypi/plone@4.3.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/9366?format=api", "purl": "pkg:pypi/plone@5.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-c3we-w4qc-6fhs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0" } ], "aliases": [ "CVE-2017-1000481", "GHSA-8g72-gq68-6gqh", "PYSEC-2018-70" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y2bq-cb4v-mke6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7213?format=api", "vulnerability_id": "VCID-ykg2-qbyr-ayd5", "summary": "member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4197", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00498", "scoring_system": "epss", "scoring_elements": "0.66192", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4197" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978478", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978478" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-61.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-61.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4197", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4197" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4197", "GHSA-jjvw-3h9j-p7jf", "PYSEC-2014-61" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ykg2-qbyr-ayd5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8026?format=api", "vulnerability_id": "VCID-z8kt-tf38-eqgc", "summary": "Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28735", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00484", "scoring_system": "epss", "scoring_elements": "0.65579", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28735" }, { "reference_url": "https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt" }, { "reference_url": "https://github.com/advisories/GHSA-x7wf-5mjc-6x76", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x7wf-5mjc-6x76" }, { "reference_url": "https://github.com/plone/Products.CMFPlone/issues/3209", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Products.CMFPlone/issues/3209" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-247.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-247.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28735", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28735" }, { "reference_url": "https://www.misakikata.com/codes/plone/python-en.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.misakikata.com/codes/plone/python-en.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18282?format=api", "purl": "pkg:pypi/plone@5.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-ccuu-86vs-s3gs" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-dnu9-u6zt-c7ch" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3" } ], "aliases": [ "CVE-2020-28735", "GHSA-x7wf-5mjc-6x76", "PYSEC-2020-247" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z8kt-tf38-eqgc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7224?format=api", "vulnerability_id": "VCID-zf51-58kf-43bf", "summary": "sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to spoof emails via unspecified vectors.", "references": [ { "reference_url": "http://plone.org/products/plone-hotfix/releases/20130618", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone-hotfix/releases/20130618" }, { "reference_url": "http://plone.org/products/plone/security/advisories/20130618-announcement", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/20130618-announcement" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4192", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44395", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4192" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=978464", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=978464" }, { "reference_url": "http://seclists.org/oss-sec/2013/q3/261", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2013/q3/261" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-56.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-56.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4192", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4192" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5921?format=api", "purl": "pkg:pypi/plone@4.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6675?format=api", "purl": "pkg:pypi/plone@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6676?format=api", "purl": "pkg:pypi/plone@4.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2jxf-hfxq-skg7" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-36rb-6jkw-j7d8" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3s9q-6gvu-qyef" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gejv-h449-13e4" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-r61f-p8nh-2bax" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-s5ab-nud4-5qdg" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-sg6k-wdwq-9bgd" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-wage-1bme-bkgb" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2" } ], "aliases": [ "CVE-2013-4192", "GHSA-f5h9-3hpf-9j8m", "PYSEC-2014-56" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zf51-58kf-43bf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7062?format=api", "vulnerability_id": "VCID-zh6q-ud29-3ufe", "summary": "Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transform.", "references": [ { "reference_url": "http://plone.org/products/plone/security/advisories/cve-2010-unassigned-html-injection-in-safe_html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://plone.org/products/plone/security/advisories/cve-2010-unassigned-html-injection-in-safe_html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-2422", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00392", "scoring_system": "epss", "scoring_elements": "0.60453", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-2422" }, { "reference_url": "http://secunia.com/advisories/40270", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/40270" }, { "reference_url": "https://github.com/plone/Plone", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/plone/Plone" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2010-19.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2010-19.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2422", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2422" }, { "reference_url": "https://web.archive.org/web/20100728161728/http://secunia.com/advisories/40270", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20100728161728/http://secunia.com/advisories/40270" }, { "reference_url": "https://web.archive.org/web/20200228223808/http://www.securityfocus.com/bid/40999", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200228223808/http://www.securityfocus.com/bid/40999" }, { "reference_url": "http://www.securityfocus.com/bid/40999", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/40999" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5774?format=api", "purl": "pkg:pypi/plone@3.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sck-4684-wbbv" }, { "vulnerability": "VCID-21n6-9mrg-2fdp" }, { "vulnerability": "VCID-2vmc-exnd-qua6" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-f2hn-g67h-kfgk" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/5876?format=api", "purl": "pkg:pypi/plone@3.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21n6-9mrg-2fdp" }, { "vulnerability": "VCID-311f-xecp-47fm" }, { "vulnerability": "VCID-31m2-mwzq-judc" }, { "vulnerability": "VCID-36xh-ua3s-gyfr" }, { "vulnerability": "VCID-3n34-5rm7-nbcj" }, { "vulnerability": "VCID-3uw2-j3r6-77ch" }, { "vulnerability": "VCID-3v6x-b2g3-fyhq" }, { "vulnerability": "VCID-43m1-jkv8-jygp" }, { "vulnerability": "VCID-46az-51p2-yfdf" }, { "vulnerability": "VCID-4bjr-mjug-gqd2" }, { "vulnerability": "VCID-4hzn-mj8g-37ew" }, { "vulnerability": "VCID-4xdg-1sku-17cd" }, { "vulnerability": "VCID-4ym2-39bg-dbga" }, { "vulnerability": "VCID-5bnw-ktd3-8qeb" }, { "vulnerability": "VCID-5e2c-6mkx-4udu" }, { "vulnerability": "VCID-5kaj-zugj-mbh1" }, { "vulnerability": "VCID-5tbn-qmuj-jya9" }, { "vulnerability": "VCID-5z33-3pqj-gygw" }, { "vulnerability": "VCID-6898-z4k5-h3b6" }, { "vulnerability": "VCID-6rsz-krhe-q3gz" }, { "vulnerability": "VCID-7mc8-x346-eyaq" }, { "vulnerability": "VCID-83xg-a5v4-4bcw" }, { "vulnerability": "VCID-8gk5-28z6-7bcf" }, { "vulnerability": "VCID-8j8e-z731-7fbz" }, { "vulnerability": "VCID-8md9-zymx-w7cn" }, { "vulnerability": "VCID-8r52-vc7e-f3bc" }, { "vulnerability": "VCID-99bf-ybqh-dfad" }, { "vulnerability": "VCID-9ze6-mfrw-ukdv" }, { "vulnerability": "VCID-a628-5uyk-w3ca" }, { "vulnerability": "VCID-a67e-svcb-ekhc" }, { "vulnerability": "VCID-bj9p-4wzt-47cf" }, { "vulnerability": "VCID-ch1t-qmtc-xqfx" }, { "vulnerability": "VCID-d68e-uehc-nudc" }, { "vulnerability": "VCID-f2hn-g67h-kfgk" }, { "vulnerability": "VCID-fd6y-2fcd-jbck" }, { "vulnerability": "VCID-fga8-ymex-67fw" }, { "vulnerability": "VCID-gsnt-c1cd-d3bf" }, { "vulnerability": "VCID-hzgj-wca9-z3d1" }, { "vulnerability": "VCID-jhc2-yux7-vybj" }, { "vulnerability": "VCID-k34d-p9vb-g7by" }, { "vulnerability": "VCID-kak6-5sps-z3da" }, { "vulnerability": "VCID-kmd1-vu9u-d7g4" }, { "vulnerability": "VCID-kvvr-zc1s-akhn" }, { "vulnerability": "VCID-m91w-vguw-qkem" }, { "vulnerability": "VCID-mgpa-1taj-pycj" }, { "vulnerability": "VCID-njnv-5cwt-4ygy" }, { "vulnerability": "VCID-pn5z-xdcd-zqd5" }, { "vulnerability": "VCID-pncb-4m8u-hbaw" }, { "vulnerability": "VCID-pv2n-2y41-pbg5" }, { "vulnerability": "VCID-qkv2-qpe2-97cx" }, { "vulnerability": "VCID-qskf-bt81-5bbe" }, { "vulnerability": "VCID-r874-3h26-j3fp" }, { "vulnerability": "VCID-rn4s-px1y-7fbc" }, { "vulnerability": "VCID-sa7x-wvn1-skh1" }, { "vulnerability": "VCID-scgs-bz44-ebfk" }, { "vulnerability": "VCID-swq8-17qu-vyfw" }, { "vulnerability": "VCID-tfmu-7tad-xbbe" }, { "vulnerability": "VCID-u1hz-5a2a-ybac" }, { "vulnerability": "VCID-uduq-ujbb-6qd2" }, { "vulnerability": "VCID-ugq4-1vzc-6uh5" }, { "vulnerability": "VCID-uv7n-awe5-2fav" }, { "vulnerability": "VCID-vc1v-xsbc-kff1" }, { "vulnerability": "VCID-w2u3-bnqq-mqfz" }, { "vulnerability": "VCID-xa5e-bbcv-byg9" }, { "vulnerability": "VCID-xksv-mub7-dyck" }, { "vulnerability": "VCID-xpjk-k6tj-2uba" }, { "vulnerability": "VCID-y2bq-cb4v-mke6" }, { "vulnerability": "VCID-yaa8-vy4x-cqbq" }, { "vulnerability": "VCID-ykg2-qbyr-ayd5" }, { "vulnerability": "VCID-ymbd-m6tf-5bap" }, { "vulnerability": "VCID-z8kt-tf38-eqgc" }, { "vulnerability": "VCID-zf51-58kf-43bf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.6" } ], "aliases": [ "CVE-2010-2422", "GHSA-qj7x-wm9q-qjx8", "PYSEC-2010-19" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zh6q-ud29-3ufe" } ], "fixing_vulnerabilities": [], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3rc3" }