Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/plone@3.3.4
Typepypi
Namespace
Nameplone
Version3.3.4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.2a3
Latest_non_vulnerable_version6.0.7
Affected_by_vulnerabilities
0
url VCID-2sk4-yc6h-17c4
vulnerability_id VCID-2sk4-yc6h-17c4
summary The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 2.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.
references
0
reference_url https://bugs.launchpad.net/zope2/+bug/1079238
reference_id
reference_type
scores
url https://bugs.launchpad.net/zope2/+bug/1079238
1
reference_url https://github.com/advisories/GHSA-879r-7f3w-8jj3
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-879r-7f3w-8jj3
2
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-31.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-31.yaml
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-74.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-74.yaml
5
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
6
reference_url https://plone.org/products/plone/security/advisories/20121106/05
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/05
7
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5489
reference_id CVE-2012-5489
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5489
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5489, GHSA-879r-7f3w-8jj3, PYSEC-2014-31, PYSEC-2014-74
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2sk4-yc6h-17c4
1
url VCID-3buw-zes9-ukg4
vulnerability_id VCID-3buw-zes9-ukg4
summary Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
references
0
reference_url http://osvdb.org/72728
reference_id
reference_type
scores
url http://osvdb.org/72728
1
reference_url http://plone.org/products/plone/security/advisories/CVE-2011-1949
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/CVE-2011-1949
2
reference_url http://secunia.com/advisories/44775
reference_id
reference_type
scores
url http://secunia.com/advisories/44775
3
reference_url http://secunia.com/advisories/44776
reference_id
reference_type
scores
url http://secunia.com/advisories/44776
4
reference_url http://securityreason.com/securityalert/8269
reference_id
reference_type
scores
url http://securityreason.com/securityalert/8269
5
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/67694
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/67694
6
reference_url https://github.com/advisories/GHSA-h6hq-c896-w882
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-h6hq-c896-w882
7
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
8
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-15.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-15.yaml
9
reference_url http://www.securityfocus.com/archive/1/518155/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/518155/100/0/threaded
10
reference_url http://www.securityfocus.com/bid/48005
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/48005
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-1949
reference_id CVE-2011-1949
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2011-1949
fixed_packages
0
url pkg:pypi/plone@3.3.6
purl pkg:pypi/plone@3.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9kgy-2mwu-6yhd
12
vulnerability VCID-9u27-bf7b-x7er
13
vulnerability VCID-ax8a-2g7j-6ya2
14
vulnerability VCID-ay85-551m-vfej
15
vulnerability VCID-basq-jjsf-3fbd
16
vulnerability VCID-chqa-wbu7-eyak
17
vulnerability VCID-cpwq-sq8b-4yhf
18
vulnerability VCID-d42u-s7za-a3ad
19
vulnerability VCID-dg61-tw4u-dbcc
20
vulnerability VCID-dxqw-uf6r-vbbh
21
vulnerability VCID-edq7-7ncc-mbfx
22
vulnerability VCID-eg2r-ez9f-hkak
23
vulnerability VCID-eu4z-htaq-c3d6
24
vulnerability VCID-exan-4j3e-2qeh
25
vulnerability VCID-fdpc-runu-ekah
26
vulnerability VCID-fqcf-4say-h7g8
27
vulnerability VCID-g2ap-vh6r-yqds
28
vulnerability VCID-g6ky-pfur-7kfg
29
vulnerability VCID-gdtw-2d1s-2bbw
30
vulnerability VCID-h4kd-eh8g-gude
31
vulnerability VCID-h8ur-tnzd-afay
32
vulnerability VCID-hb93-ea78-8ygv
33
vulnerability VCID-hhux-xufk-ube2
34
vulnerability VCID-hygx-6n52-u7fz
35
vulnerability VCID-jhw6-wxz2-qbgd
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vgga-a2ga-t3hw
58
vulnerability VCID-vr9k-9xch-4yc7
59
vulnerability VCID-w2mv-zekv-8fcv
60
vulnerability VCID-wuas-tkd4-rkd4
61
vulnerability VCID-x2xm-hpc2-uubq
62
vulnerability VCID-x6y6-xx1a-7kfd
63
vulnerability VCID-x8n5-qj35-eqb1
64
vulnerability VCID-xpq8-npn5-kyb9
65
vulnerability VCID-yfkz-3xu3-vyc9
66
vulnerability VCID-yhzr-hb68-cfd6
67
vulnerability VCID-ykmg-jcfe-8qf4
68
vulnerability VCID-yuph-y2fa-3uaa
69
vulnerability VCID-zd73-fvwg-nbgx
70
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.6
1
url pkg:pypi/plone@4.0.6
purl pkg:pypi/plone@4.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9gu8-dgkr-sua3
12
vulnerability VCID-9kgy-2mwu-6yhd
13
vulnerability VCID-9u27-bf7b-x7er
14
vulnerability VCID-ax8a-2g7j-6ya2
15
vulnerability VCID-ay85-551m-vfej
16
vulnerability VCID-basq-jjsf-3fbd
17
vulnerability VCID-bmwk-nutp-r3fs
18
vulnerability VCID-chqa-wbu7-eyak
19
vulnerability VCID-cpwq-sq8b-4yhf
20
vulnerability VCID-d42u-s7za-a3ad
21
vulnerability VCID-dg61-tw4u-dbcc
22
vulnerability VCID-dxqw-uf6r-vbbh
23
vulnerability VCID-edq7-7ncc-mbfx
24
vulnerability VCID-eg2r-ez9f-hkak
25
vulnerability VCID-eu4z-htaq-c3d6
26
vulnerability VCID-exan-4j3e-2qeh
27
vulnerability VCID-fdpc-runu-ekah
28
vulnerability VCID-g2ap-vh6r-yqds
29
vulnerability VCID-g6ky-pfur-7kfg
30
vulnerability VCID-gdtw-2d1s-2bbw
31
vulnerability VCID-h4kd-eh8g-gude
32
vulnerability VCID-h8ur-tnzd-afay
33
vulnerability VCID-hb93-ea78-8ygv
34
vulnerability VCID-hhux-xufk-ube2
35
vulnerability VCID-hygx-6n52-u7fz
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vgga-a2ga-t3hw
58
vulnerability VCID-vr9k-9xch-4yc7
59
vulnerability VCID-w2mv-zekv-8fcv
60
vulnerability VCID-wuas-tkd4-rkd4
61
vulnerability VCID-x2xm-hpc2-uubq
62
vulnerability VCID-x6y6-xx1a-7kfd
63
vulnerability VCID-x8n5-qj35-eqb1
64
vulnerability VCID-xpq8-npn5-kyb9
65
vulnerability VCID-yfkz-3xu3-vyc9
66
vulnerability VCID-yhzr-hb68-cfd6
67
vulnerability VCID-ykmg-jcfe-8qf4
68
vulnerability VCID-yuph-y2fa-3uaa
69
vulnerability VCID-zd73-fvwg-nbgx
70
vulnerability VCID-zwnj-revc-vbd6
71
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.6
2
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
aliases CVE-2011-1949, GHSA-h6hq-c896-w882, PYSEC-2011-15
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3buw-zes9-ukg4
2
url VCID-3shf-hh9a-rqdw
vulnerability_id VCID-3shf-hh9a-rqdw
summary zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote attackers to obtain sensitive information by reading a generated archive.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978453
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978453
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4191, PYSEC-2014-55
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3shf-hh9a-rqdw
3
url VCID-4v5e-r5we-tffe
vulnerability_id VCID-4v5e-r5we-tffe
summary The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allow_external_login_sites filtering property, redirect users to arbitrary web sites, and conduct phishing attacks via a space before a URL in the "next" parameter to acl_users/credentials_cookie_auth/require_login.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4200
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4200
3
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-64.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-64.yaml
5
reference_url http://www.openwall.com/lists/oss-security/2013/08/01/2
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2013/08/01/2
6
reference_url http://www.securityfocus.com/archive/1/530787/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/530787/100/0/threaded
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4200
reference_id CVE-2013-4200
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2013-4200
8
reference_url https://github.com/advisories/GHSA-56p3-rrp4-2j82
reference_id GHSA-56p3-rrp4-2j82
reference_type
scores
url https://github.com/advisories/GHSA-56p3-rrp4-2j82
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4200, GHSA-56p3-rrp4-2j82, PYSEC-2014-64
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4v5e-r5we-tffe
4
url VCID-5n6e-cha8-nyb8
vulnerability_id VCID-5n6e-cha8-nyb8
summary Cross-site scripting (XSS) vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
references
0
reference_url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
reference_id
reference_type
scores
url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
1
reference_url http://seclists.org/fulldisclosure/2016/Oct/80
reference_id
reference_type
scores
url http://seclists.org/fulldisclosure/2016/Oct/80
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-61.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-61.yaml
4
reference_url https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone-1
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone-1
5
reference_url https://web.archive.org/web/20210625091607/http://www.securityfocus.com/bid/92752
reference_id
reference_type
scores
url https://web.archive.org/web/20210625091607/http://www.securityfocus.com/bid/92752
6
reference_url https://web.archive.org/web/20210625092107/http://www.securityfocus.com/archive/1/539572/100/0/threaded
reference_id
reference_type
scores
url https://web.archive.org/web/20210625092107/http://www.securityfocus.com/archive/1/539572/100/0/threaded
7
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/4
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/09/05/4
8
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/5
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/09/05/5
9
reference_url http://www.securityfocus.com/archive/1/539572/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/539572/100/0/threaded
10
reference_url http://www.securityfocus.com/bid/92752
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/92752
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-7138
reference_id CVE-2016-7138
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2016-7138
12
reference_url https://github.com/advisories/GHSA-v3hp-f8qr-cf3p
reference_id GHSA-v3hp-f8qr-cf3p
reference_type
scores
url https://github.com/advisories/GHSA-v3hp-f8qr-cf3p
fixed_packages
0
url pkg:pypi/plone@4.0a1
purl pkg:pypi/plone@4.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9kgy-2mwu-6yhd
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-basq-jjsf-3fbd
14
vulnerability VCID-chqa-wbu7-eyak
15
vulnerability VCID-cpwq-sq8b-4yhf
16
vulnerability VCID-d42u-s7za-a3ad
17
vulnerability VCID-dg61-tw4u-dbcc
18
vulnerability VCID-dxqw-uf6r-vbbh
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eg2r-ez9f-hkak
21
vulnerability VCID-eu4z-htaq-c3d6
22
vulnerability VCID-exan-4j3e-2qeh
23
vulnerability VCID-fdpc-runu-ekah
24
vulnerability VCID-g2ap-vh6r-yqds
25
vulnerability VCID-g6ky-pfur-7kfg
26
vulnerability VCID-gdtw-2d1s-2bbw
27
vulnerability VCID-h8ur-tnzd-afay
28
vulnerability VCID-hb93-ea78-8ygv
29
vulnerability VCID-hhux-xufk-ube2
30
vulnerability VCID-hygx-6n52-u7fz
31
vulnerability VCID-jhw6-wxz2-qbgd
32
vulnerability VCID-jvwn-yw13-gfe9
33
vulnerability VCID-khhr-m295-23gs
34
vulnerability VCID-khsn-43tn-37bx
35
vulnerability VCID-krfw-xa2b-vue5
36
vulnerability VCID-kz14-79we-xbfe
37
vulnerability VCID-mt5t-3gsw-7fde
38
vulnerability VCID-n4nh-4rq4-r7hx
39
vulnerability VCID-nrxp-p6rx-8kdd
40
vulnerability VCID-p71t-er3d-9fdn
41
vulnerability VCID-pb2y-jwn1-wbck
42
vulnerability VCID-pgrv-sncf-cqca
43
vulnerability VCID-pzke-4by2-w3hk
44
vulnerability VCID-q7nt-b3s9-9kf6
45
vulnerability VCID-r52t-hx1j-ufa1
46
vulnerability VCID-s84e-bb7w-5qht
47
vulnerability VCID-shjb-m9k6-uuf1
48
vulnerability VCID-svbc-dj3m-t7av
49
vulnerability VCID-tc7w-wttv-vfed
50
vulnerability VCID-ud5f-7gx8-83d6
51
vulnerability VCID-uqe7-n3uh-zfac
52
vulnerability VCID-uykg-p1e9-mfd8
53
vulnerability VCID-vr9k-9xch-4yc7
54
vulnerability VCID-w2mv-zekv-8fcv
55
vulnerability VCID-x2xm-hpc2-uubq
56
vulnerability VCID-x6y6-xx1a-7kfd
57
vulnerability VCID-x8n5-qj35-eqb1
58
vulnerability VCID-xpq8-npn5-kyb9
59
vulnerability VCID-yfkz-3xu3-vyc9
60
vulnerability VCID-yhzr-hb68-cfd6
61
vulnerability VCID-ykmg-jcfe-8qf4
62
vulnerability VCID-yuph-y2fa-3uaa
63
vulnerability VCID-zd73-fvwg-nbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0a1
1
url pkg:pypi/plone@4.3.12
purl pkg:pypi/plone@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ry7-xy6b-5fag
1
vulnerability VCID-69ps-uetw-y3gf
2
vulnerability VCID-8rp3-p3qe-x7ej
3
vulnerability VCID-8wkk-84ky-17ak
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-cpwq-sq8b-4yhf
9
vulnerability VCID-d42u-s7za-a3ad
10
vulnerability VCID-dg61-tw4u-dbcc
11
vulnerability VCID-edq7-7ncc-mbfx
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-pzke-4by2-w3hk
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
22
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.12
2
url pkg:pypi/plone@5.0.7
purl pkg:pypi/plone@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-5ry7-xy6b-5fag
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8wkk-84ky-17ak
5
vulnerability VCID-951j-w95x-83g8
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-dg61-tw4u-dbcc
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-jvvz-bafs-t7gc
18
vulnerability VCID-p71t-er3d-9fdn
19
vulnerability VCID-pzke-4by2-w3hk
20
vulnerability VCID-q7nt-b3s9-9kf6
21
vulnerability VCID-r52t-hx1j-ufa1
22
vulnerability VCID-x2xm-hpc2-uubq
23
vulnerability VCID-z4jt-v88h-77er
24
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7
aliases CVE-2016-7138, GHSA-v3hp-f8qr-cf3p, PYSEC-2017-61
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5n6e-cha8-nyb8
5
url VCID-5ry7-xy6b-5fag
vulnerability_id VCID-5ry7-xy6b-5fag
summary Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5.
references
0
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-72.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-72.yaml
2
reference_url https://plone.org/security/hotfix/20171128/sandbox-escape
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20171128/sandbox-escape
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000483
reference_id CVE-2017-1000483
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000483
4
reference_url https://github.com/advisories/GHSA-qc57-h2f7-p4hx
reference_id GHSA-qc57-h2f7-p4hx
reference_type
scores
url https://github.com/advisories/GHSA-qc57-h2f7-p4hx
fixed_packages
0
url pkg:pypi/plone@4.3.16
purl pkg:pypi/plone@4.3.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8rp3-p3qe-x7ej
1
vulnerability VCID-8wkk-84ky-17ak
2
vulnerability VCID-9gu8-dgkr-sua3
3
vulnerability VCID-ax8a-2g7j-6ya2
4
vulnerability VCID-basq-jjsf-3fbd
5
vulnerability VCID-bmwk-nutp-r3fs
6
vulnerability VCID-cpwq-sq8b-4yhf
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-edq7-7ncc-mbfx
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-p71t-er3d-9fdn
14
vulnerability VCID-pzke-4by2-w3hk
15
vulnerability VCID-q7nt-b3s9-9kf6
16
vulnerability VCID-r52t-hx1j-ufa1
17
vulnerability VCID-x2xm-hpc2-uubq
18
vulnerability VCID-z4jt-v88h-77er
19
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.16
1
url pkg:pypi/plone@5.1.0
purl pkg:pypi/plone@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-8rp3-p3qe-x7ej
2
vulnerability VCID-8wkk-84ky-17ak
3
vulnerability VCID-951j-w95x-83g8
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-d42u-s7za-a3ad
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-p71t-er3d-9fdn
14
vulnerability VCID-q7nt-b3s9-9kf6
15
vulnerability VCID-r52t-hx1j-ufa1
16
vulnerability VCID-x2xm-hpc2-uubq
17
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0
aliases CVE-2017-1000483, GHSA-qc57-h2f7-p4hx, PYSEC-2018-72
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ry7-xy6b-5fag
6
url VCID-6568-4ert-1bau
vulnerability_id VCID-6568-4ert-1bau
summary Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method.
references
0
reference_url https://github.com/advisories/GHSA-p5wr-vp8g-q5p4
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-p5wr-vp8g-q5p4
1
reference_url https://github.com/plone/Products.CMFPlone/commit/a7d47692058e10ce89968e7ca4dacbdf44fcad4f
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/a7d47692058e10ce89968e7ca4dacbdf44fcad4f
2
reference_url https://github.com/plone/Products.CMFPlone/pull/1912
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/1912
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-81.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-81.yaml
4
reference_url https://plone.org/security/hotfix/20170117/sandbox-escape
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20170117/sandbox-escape
5
reference_url http://www.openwall.com/lists/oss-security/2017/01/18/6
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2017/01/18/6
6
reference_url http://www.securityfocus.com/bid/95679
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/95679
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-5524
reference_id CVE-2017-5524
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-5524
fixed_packages
0
url pkg:pypi/plone@4.3.12
purl pkg:pypi/plone@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ry7-xy6b-5fag
1
vulnerability VCID-69ps-uetw-y3gf
2
vulnerability VCID-8rp3-p3qe-x7ej
3
vulnerability VCID-8wkk-84ky-17ak
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-cpwq-sq8b-4yhf
9
vulnerability VCID-d42u-s7za-a3ad
10
vulnerability VCID-dg61-tw4u-dbcc
11
vulnerability VCID-edq7-7ncc-mbfx
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-pzke-4by2-w3hk
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
22
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.12
1
url pkg:pypi/plone@5.0.7
purl pkg:pypi/plone@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-5ry7-xy6b-5fag
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8wkk-84ky-17ak
5
vulnerability VCID-951j-w95x-83g8
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-dg61-tw4u-dbcc
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-jvvz-bafs-t7gc
18
vulnerability VCID-p71t-er3d-9fdn
19
vulnerability VCID-pzke-4by2-w3hk
20
vulnerability VCID-q7nt-b3s9-9kf6
21
vulnerability VCID-r52t-hx1j-ufa1
22
vulnerability VCID-x2xm-hpc2-uubq
23
vulnerability VCID-z4jt-v88h-77er
24
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7
2
url pkg:pypi/plone@5.1b1
purl pkg:pypi/plone@5.1b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-5ry7-xy6b-5fag
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8wkk-84ky-17ak
5
vulnerability VCID-951j-w95x-83g8
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-dg61-tw4u-dbcc
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-p71t-er3d-9fdn
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1b1
aliases CVE-2017-5524, GHSA-p5wr-vp8g-q5p4, PYSEC-2017-81
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6568-4ert-1bau
7
url VCID-69ps-uetw-y3gf
vulnerability_id VCID-69ps-uetw-y3gf
summary A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.
references
0
reference_url https://github.com/plone/Products.CMFPlone
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone
1
reference_url https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab
2
reference_url https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b
3
reference_url https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8
4
reference_url https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373
5
reference_url https://github.com/plone/Products.CMFPlone/issues/2232
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/issues/2232
6
reference_url https://github.com/plone/Products.CMFPlone/pull/2233
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/2233
7
reference_url https://github.com/plone/Products.CMFPlone/pull/2234
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/2234
8
reference_url https://github.com/plone/Products.CMFPlone/pull/2235
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/2235
9
reference_url https://github.com/plone/Products.CMFPlone/pull/2236
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/2236
10
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-71.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-71.yaml
11
reference_url https://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000482
reference_id CVE-2017-1000482
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000482
13
reference_url https://github.com/advisories/GHSA-859j-668v-mrr6
reference_id GHSA-859j-668v-mrr6
reference_type
scores
url https://github.com/advisories/GHSA-859j-668v-mrr6
fixed_packages
0
url pkg:pypi/plone@4.3.16
purl pkg:pypi/plone@4.3.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8rp3-p3qe-x7ej
1
vulnerability VCID-8wkk-84ky-17ak
2
vulnerability VCID-9gu8-dgkr-sua3
3
vulnerability VCID-ax8a-2g7j-6ya2
4
vulnerability VCID-basq-jjsf-3fbd
5
vulnerability VCID-bmwk-nutp-r3fs
6
vulnerability VCID-cpwq-sq8b-4yhf
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-edq7-7ncc-mbfx
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-p71t-er3d-9fdn
14
vulnerability VCID-pzke-4by2-w3hk
15
vulnerability VCID-q7nt-b3s9-9kf6
16
vulnerability VCID-r52t-hx1j-ufa1
17
vulnerability VCID-x2xm-hpc2-uubq
18
vulnerability VCID-z4jt-v88h-77er
19
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.16
1
url pkg:pypi/plone@5.1.0
purl pkg:pypi/plone@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-8rp3-p3qe-x7ej
2
vulnerability VCID-8wkk-84ky-17ak
3
vulnerability VCID-951j-w95x-83g8
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-d42u-s7za-a3ad
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-p71t-er3d-9fdn
14
vulnerability VCID-q7nt-b3s9-9kf6
15
vulnerability VCID-r52t-hx1j-ufa1
16
vulnerability VCID-x2xm-hpc2-uubq
17
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0
aliases CVE-2017-1000482, GHSA-859j-668v-mrr6, PYSEC-2018-71
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-69ps-uetw-y3gf
8
url VCID-8rp3-p3qe-x7ej
vulnerability_id VCID-8rp3-p3qe-x7ej
summary Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).
references
0
reference_url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
reference_id
reference_type
scores
url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
1
reference_url https://github.com/advisories/GHSA-2c8c-84w2-j38j
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-2c8c-84w2-j38j
2
reference_url https://github.com/plone/Products.CMFPlone/issues/3209
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/issues/3209
3
reference_url https://www.misakikata.com/codes/plone/python-en.html
reference_id
reference_type
scores
url https://www.misakikata.com/codes/plone/python-en.html
fixed_packages
0
url pkg:pypi/plone@5.2.3
purl pkg:pypi/plone@5.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-ax8a-2g7j-6ya2
2
vulnerability VCID-basq-jjsf-3fbd
3
vulnerability VCID-d42u-s7za-a3ad
4
vulnerability VCID-eu4z-htaq-c3d6
5
vulnerability VCID-p71t-er3d-9fdn
6
vulnerability VCID-q7nt-b3s9-9kf6
7
vulnerability VCID-r52t-hx1j-ufa1
8
vulnerability VCID-x2xm-hpc2-uubq
9
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3
aliases CVE-2020-28736, GHSA-2c8c-84w2-j38j, PYSEC-2020-248
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8rp3-p3qe-x7ej
9
url VCID-9a27-8egg-7uam
vulnerability_id VCID-9a27-8egg-7uam
summary traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to "retrieving information for certain resources."
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978449
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978449
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4188, PYSEC-2014-52
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9a27-8egg-7uam
10
url VCID-9dr2-mexa-qfbn
vulnerability_id VCID-9dr2-mexa-qfbn
summary sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to spoof emails via unspecified vectors.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978464
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978464
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4192, PYSEC-2014-56
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9dr2-mexa-qfbn
11
url VCID-9kgy-2mwu-6yhd
vulnerability_id VCID-9kgy-2mwu-6yhd
summary registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1194.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-1194.html
1
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
2
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
3
reference_url https://plone.org/products/plone/security/advisories/20121106/01
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/01
4
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5485, PYSEC-2014-27
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9kgy-2mwu-6yhd
12
url VCID-9u27-bf7b-x7er
vulnerability_id VCID-9u27-bf7b-x7er
summary typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote attackers to hide fields on the forms via a crafted URL.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978469
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978469
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4193, PYSEC-2014-57
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9u27-bf7b-x7er
13
url VCID-ax8a-2g7j-6ya2
vulnerability_id VCID-ax8a-2g7j-6ya2
summary Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.
references
0
reference_url https://github.com/advisories/GHSA-fj67-w3m4-rfmp
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-fj67-w3m4-rfmp
1
reference_url https://plone.org/security/hotfix/20210518/xss-vulnerability-in-cmfdifftool
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20210518/xss-vulnerability-in-cmfdifftool
2
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/05/22/1
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33513, GHSA-fj67-w3m4-rfmp, PYSEC-2021-85
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ax8a-2g7j-6ya2
14
url VCID-ay85-551m-vfej
vulnerability_id VCID-ay85-551m-vfej
summary Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to (1) %2b%2bgroupdashboard%2b%2bplone.dashboard1%2bgroup/%2b/portlets.Actions or (2) folder/%2b%2bcontextportlets%2b%2bplone.footerportlets/%2b /portlets.Actions or the (3) came_from parameter to /login_form.
references
0
reference_url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
reference_id
reference_type
scores
url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
1
reference_url http://seclists.org/fulldisclosure/2016/Oct/80
reference_id
reference_type
scores
url http://seclists.org/fulldisclosure/2016/Oct/80
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-60.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-60.yaml
4
reference_url https://plone.org/security/hotfix/20160830/open-redirection-in-plone
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20160830/open-redirection-in-plone
5
reference_url https://web.archive.org/web/20210625091607/http://www.securityfocus.com/bid/92752
reference_id
reference_type
scores
url https://web.archive.org/web/20210625091607/http://www.securityfocus.com/bid/92752
6
reference_url https://web.archive.org/web/20210625092107/http://www.securityfocus.com/archive/1/539572/100/0/threaded
reference_id
reference_type
scores
url https://web.archive.org/web/20210625092107/http://www.securityfocus.com/archive/1/539572/100/0/threaded
7
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/4
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/09/05/4
8
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/5
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/09/05/5
9
reference_url http://www.securityfocus.com/archive/1/539572/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/539572/100/0/threaded
10
reference_url http://www.securityfocus.com/bid/92752
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/92752
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-7137
reference_id CVE-2016-7137
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2016-7137
12
reference_url https://github.com/advisories/GHSA-69vh-662j-v988
reference_id GHSA-69vh-662j-v988
reference_type
scores
url https://github.com/advisories/GHSA-69vh-662j-v988
fixed_packages
0
url pkg:pypi/plone@4.0a1
purl pkg:pypi/plone@4.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9kgy-2mwu-6yhd
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-basq-jjsf-3fbd
14
vulnerability VCID-chqa-wbu7-eyak
15
vulnerability VCID-cpwq-sq8b-4yhf
16
vulnerability VCID-d42u-s7za-a3ad
17
vulnerability VCID-dg61-tw4u-dbcc
18
vulnerability VCID-dxqw-uf6r-vbbh
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eg2r-ez9f-hkak
21
vulnerability VCID-eu4z-htaq-c3d6
22
vulnerability VCID-exan-4j3e-2qeh
23
vulnerability VCID-fdpc-runu-ekah
24
vulnerability VCID-g2ap-vh6r-yqds
25
vulnerability VCID-g6ky-pfur-7kfg
26
vulnerability VCID-gdtw-2d1s-2bbw
27
vulnerability VCID-h8ur-tnzd-afay
28
vulnerability VCID-hb93-ea78-8ygv
29
vulnerability VCID-hhux-xufk-ube2
30
vulnerability VCID-hygx-6n52-u7fz
31
vulnerability VCID-jhw6-wxz2-qbgd
32
vulnerability VCID-jvwn-yw13-gfe9
33
vulnerability VCID-khhr-m295-23gs
34
vulnerability VCID-khsn-43tn-37bx
35
vulnerability VCID-krfw-xa2b-vue5
36
vulnerability VCID-kz14-79we-xbfe
37
vulnerability VCID-mt5t-3gsw-7fde
38
vulnerability VCID-n4nh-4rq4-r7hx
39
vulnerability VCID-nrxp-p6rx-8kdd
40
vulnerability VCID-p71t-er3d-9fdn
41
vulnerability VCID-pb2y-jwn1-wbck
42
vulnerability VCID-pgrv-sncf-cqca
43
vulnerability VCID-pzke-4by2-w3hk
44
vulnerability VCID-q7nt-b3s9-9kf6
45
vulnerability VCID-r52t-hx1j-ufa1
46
vulnerability VCID-s84e-bb7w-5qht
47
vulnerability VCID-shjb-m9k6-uuf1
48
vulnerability VCID-svbc-dj3m-t7av
49
vulnerability VCID-tc7w-wttv-vfed
50
vulnerability VCID-ud5f-7gx8-83d6
51
vulnerability VCID-uqe7-n3uh-zfac
52
vulnerability VCID-uykg-p1e9-mfd8
53
vulnerability VCID-vr9k-9xch-4yc7
54
vulnerability VCID-w2mv-zekv-8fcv
55
vulnerability VCID-x2xm-hpc2-uubq
56
vulnerability VCID-x6y6-xx1a-7kfd
57
vulnerability VCID-x8n5-qj35-eqb1
58
vulnerability VCID-xpq8-npn5-kyb9
59
vulnerability VCID-yfkz-3xu3-vyc9
60
vulnerability VCID-yhzr-hb68-cfd6
61
vulnerability VCID-ykmg-jcfe-8qf4
62
vulnerability VCID-yuph-y2fa-3uaa
63
vulnerability VCID-zd73-fvwg-nbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0a1
1
url pkg:pypi/plone@4.3.12
purl pkg:pypi/plone@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ry7-xy6b-5fag
1
vulnerability VCID-69ps-uetw-y3gf
2
vulnerability VCID-8rp3-p3qe-x7ej
3
vulnerability VCID-8wkk-84ky-17ak
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-cpwq-sq8b-4yhf
9
vulnerability VCID-d42u-s7za-a3ad
10
vulnerability VCID-dg61-tw4u-dbcc
11
vulnerability VCID-edq7-7ncc-mbfx
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-pzke-4by2-w3hk
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
22
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.12
2
url pkg:pypi/plone@5.0.7
purl pkg:pypi/plone@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-5ry7-xy6b-5fag
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8wkk-84ky-17ak
5
vulnerability VCID-951j-w95x-83g8
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-dg61-tw4u-dbcc
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-jvvz-bafs-t7gc
18
vulnerability VCID-p71t-er3d-9fdn
19
vulnerability VCID-pzke-4by2-w3hk
20
vulnerability VCID-q7nt-b3s9-9kf6
21
vulnerability VCID-r52t-hx1j-ufa1
22
vulnerability VCID-x2xm-hpc2-uubq
23
vulnerability VCID-z4jt-v88h-77er
24
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7
aliases CVE-2016-7137, GHSA-69vh-662j-v988, PYSEC-2017-60
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ay85-551m-vfej
15
url VCID-basq-jjsf-3fbd
vulnerability_id VCID-basq-jjsf-3fbd
summary Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and allows an attacker to execute JavaScript in the context of the victim's browser if the victim opens a vulnerable page containing an XSS payload.
references
0
reference_url https://plone.org/download/releases/5.2.3
reference_id
reference_type
scores
url https://plone.org/download/releases/5.2.3
1
reference_url https://plone.org/security/hotfix/20210518
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20210518
2
reference_url https://www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt
reference_id
reference_type
scores
url https://www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt
3
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/05/22/1
fixed_packages
0
url pkg:pypi/plone@5.2.4
purl pkg:pypi/plone@5.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-ax8a-2g7j-6ya2
2
vulnerability VCID-d42u-s7za-a3ad
3
vulnerability VCID-eu4z-htaq-c3d6
4
vulnerability VCID-p71t-er3d-9fdn
5
vulnerability VCID-q7nt-b3s9-9kf6
6
vulnerability VCID-r52t-hx1j-ufa1
7
vulnerability VCID-x2xm-hpc2-uubq
8
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.4
aliases CVE-2021-3313, PYSEC-2021-78
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-basq-jjsf-3fbd
16
url VCID-chqa-wbu7-eyak
vulnerability_id VCID-chqa-wbu7-eyak
summary queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1194.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-1194.html
1
reference_url https://access.redhat.com/errata/RHSA-2014:1194
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1194
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=874665
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=874665
3
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
4
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-40.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-40.yaml
6
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
7
reference_url https://plone.org/products/plone/security/advisories/20121106/14
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/14
8
reference_url https://web.archive.org/web/20130528001715/https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://web.archive.org/web/20130528001715/https://plone.org/products/plone-hotfix/releases/20121106
9
reference_url https://web.archive.org/web/20131103191705/https://plone.org/products/plone/security/advisories/20121106/14
reference_id
reference_type
scores
url https://web.archive.org/web/20131103191705/https://plone.org/products/plone/security/advisories/20121106/14
10
reference_url http://www.openwall.com/lists/oss-security/2012/11/09/7
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/09/7
11
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
12
reference_url https://access.redhat.com/security/cve/CVE-2012-5498
reference_id CVE-2012-5498
reference_type
scores
url https://access.redhat.com/security/cve/CVE-2012-5498
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5498
reference_id CVE-2012-5498
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5498
14
reference_url https://github.com/advisories/GHSA-97rj-p794-wq6m
reference_id GHSA-97rj-p794-wq6m
reference_type
scores
url https://github.com/advisories/GHSA-97rj-p794-wq6m
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5498, GHSA-97rj-p794-wq6m, PYSEC-2014-40
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-chqa-wbu7-eyak
17
url VCID-cpwq-sq8b-4yhf
vulnerability_id VCID-cpwq-sq8b-4yhf
summary Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
references
0
reference_url http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html
reference_id
reference_type
scores
url http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html
1
reference_url https://plone.org/security/hotfix/20151006
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20151006
2
reference_url https://pypi.python.org/pypi/plone4.csrffixes
reference_id
reference_type
scores
url https://pypi.python.org/pypi/plone4.csrffixes
3
reference_url https://www.exploit-db.com/exploits/38411/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/38411/
fixed_packages
0
url pkg:pypi/plone@5.0a1
purl pkg:pypi/plone@5.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6568-4ert-1bau
1
vulnerability VCID-69ps-uetw-y3gf
2
vulnerability VCID-8rp3-p3qe-x7ej
3
vulnerability VCID-8wkk-84ky-17ak
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-d42u-s7za-a3ad
9
vulnerability VCID-d6hq-qfek-1bgu
10
vulnerability VCID-edq7-7ncc-mbfx
11
vulnerability VCID-eu4z-htaq-c3d6
12
vulnerability VCID-exan-4j3e-2qeh
13
vulnerability VCID-fdpc-runu-ekah
14
vulnerability VCID-h4kd-eh8g-gude
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-pzke-4by2-w3hk
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-wuas-tkd4-rkd4
21
vulnerability VCID-x2xm-hpc2-uubq
22
vulnerability VCID-z4jt-v88h-77er
23
vulnerability VCID-zwnj-revc-vbd6
24
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0a1
aliases CVE-2015-7293, PYSEC-2017-51
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cpwq-sq8b-4yhf
18
url VCID-d42u-s7za-a3ad
vulnerability_id VCID-d42u-s7za-a3ad
summary Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.
references
0
reference_url https://github.com/advisories/GHSA-gc9g-67cq-p7v4
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-gc9g-67cq-p7v4
1
reference_url https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser
2
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/05/22/1
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33511, GHSA-gc9g-67cq-p7v4, PYSEC-2021-83
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d42u-s7za-a3ad
19
url VCID-dg61-tw4u-dbcc
vulnerability_id VCID-dg61-tw4u-dbcc
summary When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by letting you click on a specially crafted link. You would login, and get redirected to the site of the attacker, letting you think that you are still on the original Plone site. Or some javascript of the attacker could be executed. Most of these types of attacks are already blocked by Plone, using the `isURLInPortal` check to make sure we only redirect to a page on the same Plone site. But a few more ways of tricking Plone into accepting a malicious link were discovered, and fixed with this hotfix.
references
0
reference_url https://github.com/plone/Products.CMFPlone
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone
1
reference_url https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab
2
reference_url https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b
3
reference_url https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8
4
reference_url https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373
5
reference_url https://github.com/plone/Products.CMFPlone/issues/2232
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/issues/2232
6
reference_url https://github.com/plone/Products.CMFPlone/pull/2233
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/2233
7
reference_url https://github.com/plone/Products.CMFPlone/pull/2234
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/2234
8
reference_url https://github.com/plone/Products.CMFPlone/pull/2235
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/2235
9
reference_url https://github.com/plone/Products.CMFPlone/pull/2236
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/pull/2236
10
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-70.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-70.yaml
11
reference_url https://plone.org/security/hotfix/20171128/open-redirection-on-login-form
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20171128/open-redirection-on-login-form
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000481
reference_id CVE-2017-1000481
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000481
13
reference_url https://github.com/advisories/GHSA-8g72-gq68-6gqh
reference_id GHSA-8g72-gq68-6gqh
reference_type
scores
url https://github.com/advisories/GHSA-8g72-gq68-6gqh
fixed_packages
0
url pkg:pypi/plone@4.3.16
purl pkg:pypi/plone@4.3.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8rp3-p3qe-x7ej
1
vulnerability VCID-8wkk-84ky-17ak
2
vulnerability VCID-9gu8-dgkr-sua3
3
vulnerability VCID-ax8a-2g7j-6ya2
4
vulnerability VCID-basq-jjsf-3fbd
5
vulnerability VCID-bmwk-nutp-r3fs
6
vulnerability VCID-cpwq-sq8b-4yhf
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-edq7-7ncc-mbfx
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-p71t-er3d-9fdn
14
vulnerability VCID-pzke-4by2-w3hk
15
vulnerability VCID-q7nt-b3s9-9kf6
16
vulnerability VCID-r52t-hx1j-ufa1
17
vulnerability VCID-x2xm-hpc2-uubq
18
vulnerability VCID-z4jt-v88h-77er
19
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.16
1
url pkg:pypi/plone@5.1.0
purl pkg:pypi/plone@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-8rp3-p3qe-x7ej
2
vulnerability VCID-8wkk-84ky-17ak
3
vulnerability VCID-951j-w95x-83g8
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-d42u-s7za-a3ad
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-p71t-er3d-9fdn
14
vulnerability VCID-q7nt-b3s9-9kf6
15
vulnerability VCID-r52t-hx1j-ufa1
16
vulnerability VCID-x2xm-hpc2-uubq
17
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0
aliases CVE-2017-1000481, GHSA-8g72-gq68-6gqh, PYSEC-2018-70
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dg61-tw4u-dbcc
20
url VCID-dxqw-uf6r-vbbh
vulnerability_id VCID-dxqw-uf6r-vbbh
summary at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types via a crafted URL.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/17
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/17
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5501, PYSEC-2014-43
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dxqw-uf6r-vbbh
21
url VCID-edq7-7ncc-mbfx
vulnerability_id VCID-edq7-7ncc-mbfx
summary By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login form and login, then get redirected to the specific url, and then get a second redirect to the attacker website. (The specific url can be seen by inspecting the hotfix code, but we don't want to make it too easy for attackers by spelling it out here.)
references
0
reference_url https://github.com/advisories/GHSA-xvwv-6wvx-px9x
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-xvwv-6wvx-px9x
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
2
reference_url https://github.com/plone/Products.CMFPlone/issues/2232
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/issues/2232
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-73.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-73.yaml
4
reference_url https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000484
reference_id CVE-2017-1000484
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000484
fixed_packages
0
url pkg:pypi/plone@4.3.16
purl pkg:pypi/plone@4.3.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8rp3-p3qe-x7ej
1
vulnerability VCID-8wkk-84ky-17ak
2
vulnerability VCID-9gu8-dgkr-sua3
3
vulnerability VCID-ax8a-2g7j-6ya2
4
vulnerability VCID-basq-jjsf-3fbd
5
vulnerability VCID-bmwk-nutp-r3fs
6
vulnerability VCID-cpwq-sq8b-4yhf
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-edq7-7ncc-mbfx
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-p71t-er3d-9fdn
14
vulnerability VCID-pzke-4by2-w3hk
15
vulnerability VCID-q7nt-b3s9-9kf6
16
vulnerability VCID-r52t-hx1j-ufa1
17
vulnerability VCID-x2xm-hpc2-uubq
18
vulnerability VCID-z4jt-v88h-77er
19
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.16
1
url pkg:pypi/plone@5.1.0
purl pkg:pypi/plone@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-8rp3-p3qe-x7ej
2
vulnerability VCID-8wkk-84ky-17ak
3
vulnerability VCID-951j-w95x-83g8
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-d42u-s7za-a3ad
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-p71t-er3d-9fdn
14
vulnerability VCID-q7nt-b3s9-9kf6
15
vulnerability VCID-r52t-hx1j-ufa1
16
vulnerability VCID-x2xm-hpc2-uubq
17
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0
aliases CVE-2017-1000484, GHSA-xvwv-6wvx-px9x, PYSEC-2018-73
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-edq7-7ncc-mbfx
22
url VCID-eg2r-ez9f-hkak
vulnerability_id VCID-eg2r-ez9f-hkak
summary Cross-site scripting (XSS) vulnerability in python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "{u,}translate."
references
0
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
1
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-36.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-36.yaml
3
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
4
reference_url https://plone.org/products/plone/security/advisories/20121106/10
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/10
5
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5494
reference_id CVE-2012-5494
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5494
7
reference_url https://github.com/advisories/GHSA-3g6w-4m7x-97v6
reference_id GHSA-3g6w-4m7x-97v6
reference_type
scores
url https://github.com/advisories/GHSA-3g6w-4m7x-97v6
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5494, GHSA-3g6w-4m7x-97v6, PYSEC-2014-36
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eg2r-ez9f-hkak
23
url VCID-eu4z-htaq-c3d6
vulnerability_id VCID-eu4z-htaq-c3d6
summary Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.
references
0
reference_url https://github.com/advisories/GHSA-4mg4-wvmx-5332
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-4mg4-wvmx-5332
1
reference_url https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-event-ical-url
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-event-ical-url
2
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/05/22/1
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33510, GHSA-4mg4-wvmx-5332, PYSEC-2021-82
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eu4z-htaq-c3d6
24
url VCID-exan-4j3e-2qeh
vulnerability_id VCID-exan-4j3e-2qeh
summary Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.
references
0
reference_url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
reference_id
reference_type
scores
url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
1
reference_url https://github.com/advisories/GHSA-wq6x-g685-w5f2
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-wq6x-g685-w5f2
2
reference_url https://github.com/plone/Products.CMFPlone/issues/3209
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/issues/3209
3
reference_url https://www.misakikata.com/codes/plone/python-en.html
reference_id
reference_type
scores
url https://www.misakikata.com/codes/plone/python-en.html
fixed_packages
0
url pkg:pypi/plone@5.2.3
purl pkg:pypi/plone@5.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-ax8a-2g7j-6ya2
2
vulnerability VCID-basq-jjsf-3fbd
3
vulnerability VCID-d42u-s7za-a3ad
4
vulnerability VCID-eu4z-htaq-c3d6
5
vulnerability VCID-p71t-er3d-9fdn
6
vulnerability VCID-q7nt-b3s9-9kf6
7
vulnerability VCID-r52t-hx1j-ufa1
8
vulnerability VCID-x2xm-hpc2-uubq
9
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3
aliases CVE-2020-28734, GHSA-wq6x-g685-w5f2, PYSEC-2020-246
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-exan-4j3e-2qeh
25
url VCID-fdpc-runu-ekah
vulnerability_id VCID-fdpc-runu-ekah
summary Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
references
0
reference_url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
reference_id
reference_type
scores
url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
1
reference_url https://github.com/advisories/GHSA-x7wf-5mjc-6x76
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-x7wf-5mjc-6x76
2
reference_url https://github.com/plone/Products.CMFPlone/issues/3209
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/issues/3209
3
reference_url https://www.misakikata.com/codes/plone/python-en.html
reference_id
reference_type
scores
url https://www.misakikata.com/codes/plone/python-en.html
fixed_packages
0
url pkg:pypi/plone@5.2.3
purl pkg:pypi/plone@5.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-ax8a-2g7j-6ya2
2
vulnerability VCID-basq-jjsf-3fbd
3
vulnerability VCID-d42u-s7za-a3ad
4
vulnerability VCID-eu4z-htaq-c3d6
5
vulnerability VCID-p71t-er3d-9fdn
6
vulnerability VCID-q7nt-b3s9-9kf6
7
vulnerability VCID-r52t-hx1j-ufa1
8
vulnerability VCID-x2xm-hpc2-uubq
9
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3
aliases CVE-2020-28735, GHSA-x7wf-5mjc-6x76, PYSEC-2020-247
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fdpc-runu-ekah
26
url VCID-fqcf-4say-h7g8
vulnerability_id VCID-fqcf-4say-h7g8
summary Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses.
references
0
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1264796
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1264796
1
reference_url https://plone.org/security/hotfix/20150910
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20150910
2
reference_url https://plone.org/security/hotfix/20150910/header-injection
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20150910/header-injection
3
reference_url http://www.openwall.com/lists/oss-security/2015/09/22/16
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/09/22/16
fixed_packages
0
url pkg:pypi/plone@4.0a1
purl pkg:pypi/plone@4.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9kgy-2mwu-6yhd
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-basq-jjsf-3fbd
14
vulnerability VCID-chqa-wbu7-eyak
15
vulnerability VCID-cpwq-sq8b-4yhf
16
vulnerability VCID-d42u-s7za-a3ad
17
vulnerability VCID-dg61-tw4u-dbcc
18
vulnerability VCID-dxqw-uf6r-vbbh
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eg2r-ez9f-hkak
21
vulnerability VCID-eu4z-htaq-c3d6
22
vulnerability VCID-exan-4j3e-2qeh
23
vulnerability VCID-fdpc-runu-ekah
24
vulnerability VCID-g2ap-vh6r-yqds
25
vulnerability VCID-g6ky-pfur-7kfg
26
vulnerability VCID-gdtw-2d1s-2bbw
27
vulnerability VCID-h8ur-tnzd-afay
28
vulnerability VCID-hb93-ea78-8ygv
29
vulnerability VCID-hhux-xufk-ube2
30
vulnerability VCID-hygx-6n52-u7fz
31
vulnerability VCID-jhw6-wxz2-qbgd
32
vulnerability VCID-jvwn-yw13-gfe9
33
vulnerability VCID-khhr-m295-23gs
34
vulnerability VCID-khsn-43tn-37bx
35
vulnerability VCID-krfw-xa2b-vue5
36
vulnerability VCID-kz14-79we-xbfe
37
vulnerability VCID-mt5t-3gsw-7fde
38
vulnerability VCID-n4nh-4rq4-r7hx
39
vulnerability VCID-nrxp-p6rx-8kdd
40
vulnerability VCID-p71t-er3d-9fdn
41
vulnerability VCID-pb2y-jwn1-wbck
42
vulnerability VCID-pgrv-sncf-cqca
43
vulnerability VCID-pzke-4by2-w3hk
44
vulnerability VCID-q7nt-b3s9-9kf6
45
vulnerability VCID-r52t-hx1j-ufa1
46
vulnerability VCID-s84e-bb7w-5qht
47
vulnerability VCID-shjb-m9k6-uuf1
48
vulnerability VCID-svbc-dj3m-t7av
49
vulnerability VCID-tc7w-wttv-vfed
50
vulnerability VCID-ud5f-7gx8-83d6
51
vulnerability VCID-uqe7-n3uh-zfac
52
vulnerability VCID-uykg-p1e9-mfd8
53
vulnerability VCID-vr9k-9xch-4yc7
54
vulnerability VCID-w2mv-zekv-8fcv
55
vulnerability VCID-x2xm-hpc2-uubq
56
vulnerability VCID-x6y6-xx1a-7kfd
57
vulnerability VCID-x8n5-qj35-eqb1
58
vulnerability VCID-xpq8-npn5-kyb9
59
vulnerability VCID-yfkz-3xu3-vyc9
60
vulnerability VCID-yhzr-hb68-cfd6
61
vulnerability VCID-ykmg-jcfe-8qf4
62
vulnerability VCID-yuph-y2fa-3uaa
63
vulnerability VCID-zd73-fvwg-nbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0a1
aliases CVE-2015-7318, PYSEC-2017-54
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fqcf-4say-h7g8
27
url VCID-g2ap-vh6r-yqds
vulnerability_id VCID-g2ap-vh6r-yqds
summary AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
references
0
reference_url https://bugs.launchpad.net/zope2/+bug/1071067
reference_id
reference_type
scores
url https://bugs.launchpad.net/zope2/+bug/1071067
1
reference_url https://github.com/advisories/GHSA-3qpr-7rmg-73v8
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-3qpr-7rmg-73v8
2
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-49.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-49.yaml
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-75.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-75.yaml
5
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
6
reference_url https://plone.org/products/plone/security/advisories/20121106/23
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/23
7
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5507
reference_id CVE-2012-5507
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5507
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5507, GHSA-3qpr-7rmg-73v8, PYSEC-2014-49, PYSEC-2014-75
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g2ap-vh6r-yqds
28
url VCID-g6ky-pfur-7kfg
vulnerability_id VCID-g6ky-pfur-7kfg
summary Cross-site scripting (XSS) vulnerability in widget_traversal.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
references
0
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
1
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-46.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-46.yaml
3
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
4
reference_url https://plone.org/products/plone/security/advisories/20121106/20
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/20
5
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5504
reference_id CVE-2012-5504
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5504
7
reference_url https://github.com/advisories/GHSA-5whw-5cmm-9jw4
reference_id GHSA-5whw-5cmm-9jw4
reference_type
scores
url https://github.com/advisories/GHSA-5whw-5cmm-9jw4
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5504, GHSA-5whw-5cmm-9jw4, PYSEC-2014-46
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g6ky-pfur-7kfg
29
url VCID-gdtw-2d1s-2bbw
vulnerability_id VCID-gdtw-2d1s-2bbw
summary Cross-site scripting (XSS) vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/06
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/06
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5490, PYSEC-2014-32
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gdtw-2d1s-2bbw
30
url VCID-h4kd-eh8g-gude
vulnerability_id VCID-h4kd-eh8g-gude
summary Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1.
references
0
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1264788
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1264788
1
reference_url https://github.com/plone/Products.CMFPlone/commit/3da710a2cd68587f0bf34f2e7ea1167d6eeee087
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/3da710a2cd68587f0bf34f2e7ea1167d6eeee087
2
reference_url https://plone.org/security/20150910/
reference_id
reference_type
scores
url https://plone.org/security/20150910/
3
reference_url https://plone.org/security/20150910/non-persistent-xss-in-plone
reference_id
reference_type
scores
url https://plone.org/security/20150910/non-persistent-xss-in-plone
4
reference_url https://plone.org/security/hotfix/20150910/non-persistent-xss-in-plone
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20150910/non-persistent-xss-in-plone
5
reference_url https://pypi.python.org/pypi/Products.PloneHotfix20150910
reference_id
reference_type
scores
url https://pypi.python.org/pypi/Products.PloneHotfix20150910
6
reference_url http://www.openwall.com/lists/oss-security/2015/09/22/14
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/09/22/14
fixed_packages
0
url pkg:pypi/plone@4.0a1
purl pkg:pypi/plone@4.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9kgy-2mwu-6yhd
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-basq-jjsf-3fbd
14
vulnerability VCID-chqa-wbu7-eyak
15
vulnerability VCID-cpwq-sq8b-4yhf
16
vulnerability VCID-d42u-s7za-a3ad
17
vulnerability VCID-dg61-tw4u-dbcc
18
vulnerability VCID-dxqw-uf6r-vbbh
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eg2r-ez9f-hkak
21
vulnerability VCID-eu4z-htaq-c3d6
22
vulnerability VCID-exan-4j3e-2qeh
23
vulnerability VCID-fdpc-runu-ekah
24
vulnerability VCID-g2ap-vh6r-yqds
25
vulnerability VCID-g6ky-pfur-7kfg
26
vulnerability VCID-gdtw-2d1s-2bbw
27
vulnerability VCID-h8ur-tnzd-afay
28
vulnerability VCID-hb93-ea78-8ygv
29
vulnerability VCID-hhux-xufk-ube2
30
vulnerability VCID-hygx-6n52-u7fz
31
vulnerability VCID-jhw6-wxz2-qbgd
32
vulnerability VCID-jvwn-yw13-gfe9
33
vulnerability VCID-khhr-m295-23gs
34
vulnerability VCID-khsn-43tn-37bx
35
vulnerability VCID-krfw-xa2b-vue5
36
vulnerability VCID-kz14-79we-xbfe
37
vulnerability VCID-mt5t-3gsw-7fde
38
vulnerability VCID-n4nh-4rq4-r7hx
39
vulnerability VCID-nrxp-p6rx-8kdd
40
vulnerability VCID-p71t-er3d-9fdn
41
vulnerability VCID-pb2y-jwn1-wbck
42
vulnerability VCID-pgrv-sncf-cqca
43
vulnerability VCID-pzke-4by2-w3hk
44
vulnerability VCID-q7nt-b3s9-9kf6
45
vulnerability VCID-r52t-hx1j-ufa1
46
vulnerability VCID-s84e-bb7w-5qht
47
vulnerability VCID-shjb-m9k6-uuf1
48
vulnerability VCID-svbc-dj3m-t7av
49
vulnerability VCID-tc7w-wttv-vfed
50
vulnerability VCID-ud5f-7gx8-83d6
51
vulnerability VCID-uqe7-n3uh-zfac
52
vulnerability VCID-uykg-p1e9-mfd8
53
vulnerability VCID-vr9k-9xch-4yc7
54
vulnerability VCID-w2mv-zekv-8fcv
55
vulnerability VCID-x2xm-hpc2-uubq
56
vulnerability VCID-x6y6-xx1a-7kfd
57
vulnerability VCID-x8n5-qj35-eqb1
58
vulnerability VCID-xpq8-npn5-kyb9
59
vulnerability VCID-yfkz-3xu3-vyc9
60
vulnerability VCID-yhzr-hb68-cfd6
61
vulnerability VCID-ykmg-jcfe-8qf4
62
vulnerability VCID-yuph-y2fa-3uaa
63
vulnerability VCID-zd73-fvwg-nbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0a1
1
url pkg:pypi/plone@4.1a1
purl pkg:pypi/plone@4.1a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9gu8-dgkr-sua3
12
vulnerability VCID-9kgy-2mwu-6yhd
13
vulnerability VCID-9u27-bf7b-x7er
14
vulnerability VCID-ax8a-2g7j-6ya2
15
vulnerability VCID-ay85-551m-vfej
16
vulnerability VCID-basq-jjsf-3fbd
17
vulnerability VCID-bmwk-nutp-r3fs
18
vulnerability VCID-chqa-wbu7-eyak
19
vulnerability VCID-cpwq-sq8b-4yhf
20
vulnerability VCID-d42u-s7za-a3ad
21
vulnerability VCID-dg61-tw4u-dbcc
22
vulnerability VCID-dxqw-uf6r-vbbh
23
vulnerability VCID-edq7-7ncc-mbfx
24
vulnerability VCID-eg2r-ez9f-hkak
25
vulnerability VCID-eu4z-htaq-c3d6
26
vulnerability VCID-exan-4j3e-2qeh
27
vulnerability VCID-fdpc-runu-ekah
28
vulnerability VCID-g2ap-vh6r-yqds
29
vulnerability VCID-g6ky-pfur-7kfg
30
vulnerability VCID-gdtw-2d1s-2bbw
31
vulnerability VCID-h8ur-tnzd-afay
32
vulnerability VCID-hb93-ea78-8ygv
33
vulnerability VCID-hhux-xufk-ube2
34
vulnerability VCID-hygx-6n52-u7fz
35
vulnerability VCID-jvwn-yw13-gfe9
36
vulnerability VCID-khhr-m295-23gs
37
vulnerability VCID-khsn-43tn-37bx
38
vulnerability VCID-krfw-xa2b-vue5
39
vulnerability VCID-kz14-79we-xbfe
40
vulnerability VCID-mt5t-3gsw-7fde
41
vulnerability VCID-n4nh-4rq4-r7hx
42
vulnerability VCID-nrxp-p6rx-8kdd
43
vulnerability VCID-p71t-er3d-9fdn
44
vulnerability VCID-pb2y-jwn1-wbck
45
vulnerability VCID-pgrv-sncf-cqca
46
vulnerability VCID-pzke-4by2-w3hk
47
vulnerability VCID-q7nt-b3s9-9kf6
48
vulnerability VCID-r52t-hx1j-ufa1
49
vulnerability VCID-s84e-bb7w-5qht
50
vulnerability VCID-shjb-m9k6-uuf1
51
vulnerability VCID-svbc-dj3m-t7av
52
vulnerability VCID-tc7w-wttv-vfed
53
vulnerability VCID-ud5f-7gx8-83d6
54
vulnerability VCID-uqe7-n3uh-zfac
55
vulnerability VCID-uykg-p1e9-mfd8
56
vulnerability VCID-vr9k-9xch-4yc7
57
vulnerability VCID-w2mv-zekv-8fcv
58
vulnerability VCID-x2xm-hpc2-uubq
59
vulnerability VCID-x6y6-xx1a-7kfd
60
vulnerability VCID-x8n5-qj35-eqb1
61
vulnerability VCID-xpq8-npn5-kyb9
62
vulnerability VCID-yfkz-3xu3-vyc9
63
vulnerability VCID-yhzr-hb68-cfd6
64
vulnerability VCID-ykmg-jcfe-8qf4
65
vulnerability VCID-yuph-y2fa-3uaa
66
vulnerability VCID-zd73-fvwg-nbgx
67
vulnerability VCID-zwnj-revc-vbd6
68
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1a1
2
url pkg:pypi/plone@4.2a1
purl pkg:pypi/plone@4.2a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-b2az-q6wv-eyhw
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-chqa-wbu7-eyak
14
vulnerability VCID-cpwq-sq8b-4yhf
15
vulnerability VCID-d42u-s7za-a3ad
16
vulnerability VCID-dg61-tw4u-dbcc
17
vulnerability VCID-dxqw-uf6r-vbbh
18
vulnerability VCID-edq7-7ncc-mbfx
19
vulnerability VCID-eg2r-ez9f-hkak
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-g2ap-vh6r-yqds
24
vulnerability VCID-g6ky-pfur-7kfg
25
vulnerability VCID-gdtw-2d1s-2bbw
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vr9k-9xch-4yc7
45
vulnerability VCID-w2mv-zekv-8fcv
46
vulnerability VCID-x2xm-hpc2-uubq
47
vulnerability VCID-x6y6-xx1a-7kfd
48
vulnerability VCID-xpq8-npn5-kyb9
49
vulnerability VCID-yfkz-3xu3-vyc9
50
vulnerability VCID-zd73-fvwg-nbgx
51
vulnerability VCID-zwnj-revc-vbd6
52
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2a1
3
url pkg:pypi/plone@4.3a1
purl pkg:pypi/plone@4.3a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-2sk4-yc6h-17c4
2
vulnerability VCID-5n6e-cha8-nyb8
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-6568-4ert-1bau
5
vulnerability VCID-69ps-uetw-y3gf
6
vulnerability VCID-8rp3-p3qe-x7ej
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-9kgy-2mwu-6yhd
9
vulnerability VCID-ax8a-2g7j-6ya2
10
vulnerability VCID-ay85-551m-vfej
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-chqa-wbu7-eyak
14
vulnerability VCID-cpwq-sq8b-4yhf
15
vulnerability VCID-d42u-s7za-a3ad
16
vulnerability VCID-dg61-tw4u-dbcc
17
vulnerability VCID-dxqw-uf6r-vbbh
18
vulnerability VCID-edq7-7ncc-mbfx
19
vulnerability VCID-eg2r-ez9f-hkak
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-g2ap-vh6r-yqds
24
vulnerability VCID-g6ky-pfur-7kfg
25
vulnerability VCID-gdtw-2d1s-2bbw
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mn7t-zgfw-tqfw
34
vulnerability VCID-mt5t-3gsw-7fde
35
vulnerability VCID-n4nh-4rq4-r7hx
36
vulnerability VCID-p71t-er3d-9fdn
37
vulnerability VCID-pb2y-jwn1-wbck
38
vulnerability VCID-pgrv-sncf-cqca
39
vulnerability VCID-pzke-4by2-w3hk
40
vulnerability VCID-q7nt-b3s9-9kf6
41
vulnerability VCID-r52t-hx1j-ufa1
42
vulnerability VCID-svbc-dj3m-t7av
43
vulnerability VCID-tc7w-wttv-vfed
44
vulnerability VCID-uykg-p1e9-mfd8
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-x2xm-hpc2-uubq
48
vulnerability VCID-x6y6-xx1a-7kfd
49
vulnerability VCID-xpq8-npn5-kyb9
50
vulnerability VCID-yfkz-3xu3-vyc9
51
vulnerability VCID-zd73-fvwg-nbgx
52
vulnerability VCID-zwnj-revc-vbd6
53
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3a1
4
url pkg:pypi/plone@4.3.7
purl pkg:pypi/plone@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-j8fv-uhxw-jkcw
21
vulnerability VCID-mn7t-zgfw-tqfw
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-z4jt-v88h-77er
29
vulnerability VCID-zwnj-revc-vbd6
30
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.7
5
url pkg:pypi/plone@5.0rc2
purl pkg:pypi/plone@5.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6568-4ert-1bau
1
vulnerability VCID-8rp3-p3qe-x7ej
2
vulnerability VCID-8wkk-84ky-17ak
3
vulnerability VCID-9gu8-dgkr-sua3
4
vulnerability VCID-ax8a-2g7j-6ya2
5
vulnerability VCID-basq-jjsf-3fbd
6
vulnerability VCID-bmwk-nutp-r3fs
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-edq7-7ncc-mbfx
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-jvvz-bafs-t7gc
14
vulnerability VCID-p71t-er3d-9fdn
15
vulnerability VCID-pzke-4by2-w3hk
16
vulnerability VCID-q7nt-b3s9-9kf6
17
vulnerability VCID-r52t-hx1j-ufa1
18
vulnerability VCID-x2xm-hpc2-uubq
19
vulnerability VCID-z4jt-v88h-77er
20
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0rc2
aliases CVE-2015-7316, PYSEC-2017-53
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h4kd-eh8g-gude
31
url VCID-h8ur-tnzd-afay
vulnerability_id VCID-h8ur-tnzd-afay
summary atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/21
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/21
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5505, PYSEC-2014-47
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h8ur-tnzd-afay
32
url VCID-hb93-ea78-8ygv
vulnerability_id VCID-hb93-ea78-8ygv
summary gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/09
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/09
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5493, PYSEC-2014-35
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hb93-ea78-8ygv
33
url VCID-hhux-xufk-ube2
vulnerability_id VCID-hhux-xufk-ube2
summary Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140.
references
0
reference_url https://plone.org/security/hotfix/20170117
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20170117
1
reference_url https://plone.org/security/hotfix/20170117/non-persistent-xss-in-zope2
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20170117/non-persistent-xss-in-zope2
2
reference_url https://www.curesec.com/blog/article/blog/Plone-XSS-186.html
reference_id
reference_type
scores
url https://www.curesec.com/blog/article/blog/Plone-XSS-186.html
3
reference_url http://www.securityfocus.com/bid/96117
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/96117
fixed_packages
0
url pkg:pypi/plone@4.3.12
purl pkg:pypi/plone@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ry7-xy6b-5fag
1
vulnerability VCID-69ps-uetw-y3gf
2
vulnerability VCID-8rp3-p3qe-x7ej
3
vulnerability VCID-8wkk-84ky-17ak
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-cpwq-sq8b-4yhf
9
vulnerability VCID-d42u-s7za-a3ad
10
vulnerability VCID-dg61-tw4u-dbcc
11
vulnerability VCID-edq7-7ncc-mbfx
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-pzke-4by2-w3hk
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
22
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.12
1
url pkg:pypi/plone@5.0.7
purl pkg:pypi/plone@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-5ry7-xy6b-5fag
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8wkk-84ky-17ak
5
vulnerability VCID-951j-w95x-83g8
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-dg61-tw4u-dbcc
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-jvvz-bafs-t7gc
18
vulnerability VCID-p71t-er3d-9fdn
19
vulnerability VCID-pzke-4by2-w3hk
20
vulnerability VCID-q7nt-b3s9-9kf6
21
vulnerability VCID-r52t-hx1j-ufa1
22
vulnerability VCID-x2xm-hpc2-uubq
23
vulnerability VCID-z4jt-v88h-77er
24
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7
aliases CVE-2016-7147, PYSEC-2017-64
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hhux-xufk-ube2
34
url VCID-hygx-6n52-u7fz
vulnerability_id VCID-hygx-6n52-u7fz
summary mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978480
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978480
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4198, PYSEC-2014-62
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hygx-6n52-u7fz
35
url VCID-jhw6-wxz2-qbgd
vulnerability_id VCID-jhw6-wxz2-qbgd
summary Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
references
0
reference_url http://osvdb.org/70753
reference_id
reference_type
scores
url http://osvdb.org/70753
1
reference_url http://plone.org/products/plone/security/advisories/cve-2011-0720
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/cve-2011-0720
2
reference_url http://secunia.com/advisories/43146
reference_id
reference_type
scores
url http://secunia.com/advisories/43146
3
reference_url http://secunia.com/advisories/43914
reference_id
reference_type
scores
url http://secunia.com/advisories/43914
4
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/65099
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/65099
5
reference_url http://www.redhat.com/support/errata/RHSA-2011-0393.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2011-0393.html
6
reference_url http://www.redhat.com/support/errata/RHSA-2011-0394.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2011-0394.html
7
reference_url http://www.securityfocus.com/bid/46102
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/46102
8
reference_url http://www.securitytracker.com/id?1025258
reference_id
reference_type
scores
url http://www.securitytracker.com/id?1025258
9
reference_url http://www.vupen.com/english/advisories/2011/0796
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0796
fixed_packages
0
url pkg:pypi/plone@4.0.1
purl pkg:pypi/plone@4.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9gu8-dgkr-sua3
12
vulnerability VCID-9kgy-2mwu-6yhd
13
vulnerability VCID-9u27-bf7b-x7er
14
vulnerability VCID-ax8a-2g7j-6ya2
15
vulnerability VCID-ay85-551m-vfej
16
vulnerability VCID-basq-jjsf-3fbd
17
vulnerability VCID-bmwk-nutp-r3fs
18
vulnerability VCID-chqa-wbu7-eyak
19
vulnerability VCID-cpwq-sq8b-4yhf
20
vulnerability VCID-d42u-s7za-a3ad
21
vulnerability VCID-dg61-tw4u-dbcc
22
vulnerability VCID-dxqw-uf6r-vbbh
23
vulnerability VCID-edq7-7ncc-mbfx
24
vulnerability VCID-eg2r-ez9f-hkak
25
vulnerability VCID-eu4z-htaq-c3d6
26
vulnerability VCID-exan-4j3e-2qeh
27
vulnerability VCID-fdpc-runu-ekah
28
vulnerability VCID-g2ap-vh6r-yqds
29
vulnerability VCID-g6ky-pfur-7kfg
30
vulnerability VCID-gdtw-2d1s-2bbw
31
vulnerability VCID-h4kd-eh8g-gude
32
vulnerability VCID-h8ur-tnzd-afay
33
vulnerability VCID-hb93-ea78-8ygv
34
vulnerability VCID-hhux-xufk-ube2
35
vulnerability VCID-hygx-6n52-u7fz
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vgga-a2ga-t3hw
58
vulnerability VCID-vr9k-9xch-4yc7
59
vulnerability VCID-w2mv-zekv-8fcv
60
vulnerability VCID-wuas-tkd4-rkd4
61
vulnerability VCID-x2xm-hpc2-uubq
62
vulnerability VCID-x6y6-xx1a-7kfd
63
vulnerability VCID-x8n5-qj35-eqb1
64
vulnerability VCID-xpq8-npn5-kyb9
65
vulnerability VCID-yfkz-3xu3-vyc9
66
vulnerability VCID-yhzr-hb68-cfd6
67
vulnerability VCID-ykmg-jcfe-8qf4
68
vulnerability VCID-yuph-y2fa-3uaa
69
vulnerability VCID-zd73-fvwg-nbgx
70
vulnerability VCID-zwnj-revc-vbd6
71
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.1
aliases CVE-2011-0720, PYSEC-2011-13
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jhw6-wxz2-qbgd
36
url VCID-jvwn-yw13-gfe9
vulnerability_id VCID-jvwn-yw13-gfe9
summary plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
references
0
reference_url http://osvdb.org/72729
reference_id
reference_type
scores
url http://osvdb.org/72729
1
reference_url http://plone.org/products/plone/security/advisories/CVE-2011-1950
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/CVE-2011-1950
2
reference_url http://secunia.com/advisories/44775
reference_id
reference_type
scores
url http://secunia.com/advisories/44775
3
reference_url http://securityreason.com/securityalert/8269
reference_id
reference_type
scores
url http://securityreason.com/securityalert/8269
4
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/67695
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/67695
5
reference_url https://github.com/advisories/GHSA-2qx8-589j-gcpx
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-2qx8-589j-gcpx
6
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-16.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-16.yaml
7
reference_url http://www.securityfocus.com/archive/1/518155/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/518155/100/0/threaded
8
reference_url http://www.securityfocus.com/bid/48005
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/48005
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-1950
reference_id CVE-2011-1950
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2011-1950
fixed_packages
0
url pkg:pypi/plone@4.0.6
purl pkg:pypi/plone@4.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9gu8-dgkr-sua3
12
vulnerability VCID-9kgy-2mwu-6yhd
13
vulnerability VCID-9u27-bf7b-x7er
14
vulnerability VCID-ax8a-2g7j-6ya2
15
vulnerability VCID-ay85-551m-vfej
16
vulnerability VCID-basq-jjsf-3fbd
17
vulnerability VCID-bmwk-nutp-r3fs
18
vulnerability VCID-chqa-wbu7-eyak
19
vulnerability VCID-cpwq-sq8b-4yhf
20
vulnerability VCID-d42u-s7za-a3ad
21
vulnerability VCID-dg61-tw4u-dbcc
22
vulnerability VCID-dxqw-uf6r-vbbh
23
vulnerability VCID-edq7-7ncc-mbfx
24
vulnerability VCID-eg2r-ez9f-hkak
25
vulnerability VCID-eu4z-htaq-c3d6
26
vulnerability VCID-exan-4j3e-2qeh
27
vulnerability VCID-fdpc-runu-ekah
28
vulnerability VCID-g2ap-vh6r-yqds
29
vulnerability VCID-g6ky-pfur-7kfg
30
vulnerability VCID-gdtw-2d1s-2bbw
31
vulnerability VCID-h4kd-eh8g-gude
32
vulnerability VCID-h8ur-tnzd-afay
33
vulnerability VCID-hb93-ea78-8ygv
34
vulnerability VCID-hhux-xufk-ube2
35
vulnerability VCID-hygx-6n52-u7fz
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vgga-a2ga-t3hw
58
vulnerability VCID-vr9k-9xch-4yc7
59
vulnerability VCID-w2mv-zekv-8fcv
60
vulnerability VCID-wuas-tkd4-rkd4
61
vulnerability VCID-x2xm-hpc2-uubq
62
vulnerability VCID-x6y6-xx1a-7kfd
63
vulnerability VCID-x8n5-qj35-eqb1
64
vulnerability VCID-xpq8-npn5-kyb9
65
vulnerability VCID-yfkz-3xu3-vyc9
66
vulnerability VCID-yhzr-hb68-cfd6
67
vulnerability VCID-ykmg-jcfe-8qf4
68
vulnerability VCID-yuph-y2fa-3uaa
69
vulnerability VCID-zd73-fvwg-nbgx
70
vulnerability VCID-zwnj-revc-vbd6
71
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.6
1
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
aliases CVE-2011-1950, GHSA-2qx8-589j-gcpx, PYSEC-2011-16
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jvwn-yw13-gfe9
37
url VCID-khhr-m295-23gs
vulnerability_id VCID-khhr-m295-23gs
summary Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).
references
0
reference_url https://bugs.launchpad.net/zope2/+bug/1071067
reference_id
reference_type
scores
url https://bugs.launchpad.net/zope2/+bug/1071067
1
reference_url https://github.com/advisories/GHSA-48vv-2pmq-9fvv
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-48vv-2pmq-9fvv
2
reference_url https://github.com/plone/Products.CMFPlone
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone
3
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-51.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-51.yaml
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-76.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-76.yaml
6
reference_url https://plone.org/products/plone-hotfix/releases/20121124
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121124
7
reference_url https://plone.org/products/plone/security/advisories/20121106/24
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/24
8
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-6661
reference_id CVE-2012-6661
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-6661
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-6661, GHSA-48vv-2pmq-9fvv, PYSEC-2014-51, PYSEC-2014-76
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-khhr-m295-23gs
38
url VCID-khsn-43tn-37bx
vulnerability_id VCID-khsn-43tn-37bx
summary The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1194.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-1194.html
1
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
2
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
3
reference_url https://plone.org/products/plone/security/advisories/20121106/16
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/16
4
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5500, PYSEC-2014-42
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-khsn-43tn-37bx
39
url VCID-krfw-xa2b-vue5
vulnerability_id VCID-krfw-xa2b-vue5
summary ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1194.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-1194.html
1
reference_url https://access.redhat.com/errata/RHSA-2014:1194
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1194
2
reference_url https://bugs.launchpad.net/zope2/+bug/930812
reference_id
reference_type
scores
url https://bugs.launchpad.net/zope2/+bug/930812
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=878939
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=878939
4
reference_url https://github.com/advisories/GHSA-77hv-8796-8ccp
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-77hv-8796-8ccp
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-28.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-28.yaml
6
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-73.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-73.yaml
7
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
8
reference_url https://plone.org/products/plone/security/advisories/20121106/02
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/02
9
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
10
reference_url https://access.redhat.com/security/cve/CVE-2012-5486
reference_id CVE-2012-5486
reference_type
scores
url https://access.redhat.com/security/cve/CVE-2012-5486
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5486
reference_id CVE-2012-5486
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5486
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5486, GHSA-77hv-8796-8ccp, PYSEC-2014-28, PYSEC-2014-73
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-krfw-xa2b-vue5
40
url VCID-kz14-79we-xbfe
vulnerability_id VCID-kz14-79we-xbfe
summary uid_catalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/08
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/08
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5492, PYSEC-2014-34
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kz14-79we-xbfe
41
url VCID-mh7a-3p1f-9ufs
vulnerability_id VCID-mh7a-3p1f-9ufs
summary kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/12
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/12
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@3.3.6
purl pkg:pypi/plone@3.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9kgy-2mwu-6yhd
12
vulnerability VCID-9u27-bf7b-x7er
13
vulnerability VCID-ax8a-2g7j-6ya2
14
vulnerability VCID-ay85-551m-vfej
15
vulnerability VCID-basq-jjsf-3fbd
16
vulnerability VCID-chqa-wbu7-eyak
17
vulnerability VCID-cpwq-sq8b-4yhf
18
vulnerability VCID-d42u-s7za-a3ad
19
vulnerability VCID-dg61-tw4u-dbcc
20
vulnerability VCID-dxqw-uf6r-vbbh
21
vulnerability VCID-edq7-7ncc-mbfx
22
vulnerability VCID-eg2r-ez9f-hkak
23
vulnerability VCID-eu4z-htaq-c3d6
24
vulnerability VCID-exan-4j3e-2qeh
25
vulnerability VCID-fdpc-runu-ekah
26
vulnerability VCID-fqcf-4say-h7g8
27
vulnerability VCID-g2ap-vh6r-yqds
28
vulnerability VCID-g6ky-pfur-7kfg
29
vulnerability VCID-gdtw-2d1s-2bbw
30
vulnerability VCID-h4kd-eh8g-gude
31
vulnerability VCID-h8ur-tnzd-afay
32
vulnerability VCID-hb93-ea78-8ygv
33
vulnerability VCID-hhux-xufk-ube2
34
vulnerability VCID-hygx-6n52-u7fz
35
vulnerability VCID-jhw6-wxz2-qbgd
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vgga-a2ga-t3hw
58
vulnerability VCID-vr9k-9xch-4yc7
59
vulnerability VCID-w2mv-zekv-8fcv
60
vulnerability VCID-wuas-tkd4-rkd4
61
vulnerability VCID-x2xm-hpc2-uubq
62
vulnerability VCID-x6y6-xx1a-7kfd
63
vulnerability VCID-x8n5-qj35-eqb1
64
vulnerability VCID-xpq8-npn5-kyb9
65
vulnerability VCID-yfkz-3xu3-vyc9
66
vulnerability VCID-yhzr-hb68-cfd6
67
vulnerability VCID-ykmg-jcfe-8qf4
68
vulnerability VCID-yuph-y2fa-3uaa
69
vulnerability VCID-zd73-fvwg-nbgx
70
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.6
aliases CVE-2012-5496, PYSEC-2014-38
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mh7a-3p1f-9ufs
42
url VCID-mt5t-3gsw-7fde
vulnerability_id VCID-mt5t-3gsw-7fde
summary python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "go_back."
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/11
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/11
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5495, PYSEC-2014-37
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mt5t-3gsw-7fde
43
url VCID-n4nh-4rq4-r7hx
vulnerability_id VCID-n4nh-4rq4-r7hx
summary Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.
references
0
reference_url https://plone.org/security/20131210/path-leak
reference_id
reference_type
scores
url https://plone.org/security/20131210/path-leak
1
reference_url http://www.openwall.com/lists/oss-security/2013/12/10/15
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2013/12/10/15
2
reference_url http://www.openwall.com/lists/oss-security/2013/12/12/3
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2013/12/12/3
fixed_packages
0
url pkg:pypi/plone@4.3.3
purl pkg:pypi/plone@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-p71t-er3d-9fdn
24
vulnerability VCID-pzke-4by2-w3hk
25
vulnerability VCID-q7nt-b3s9-9kf6
26
vulnerability VCID-r52t-hx1j-ufa1
27
vulnerability VCID-wuas-tkd4-rkd4
28
vulnerability VCID-x2xm-hpc2-uubq
29
vulnerability VCID-yfkz-3xu3-vyc9
30
vulnerability VCID-z4jt-v88h-77er
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.3
aliases CVE-2013-7060, PYSEC-2014-65, PYSEC-2014-67
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n4nh-4rq4-r7hx
44
url VCID-nrxp-p6rx-8kdd
vulnerability_id VCID-nrxp-p6rx-8kdd
summary Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978471
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978471
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
4
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-59.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-59.yaml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4195
reference_id CVE-2013-4195
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2013-4195
7
reference_url https://github.com/advisories/GHSA-j67j-8hrp-76xm
reference_id GHSA-j67j-8hrp-76xm
reference_type
scores
url https://github.com/advisories/GHSA-j67j-8hrp-76xm
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4195, GHSA-j67j-8hrp-76xm, PYSEC-2014-59
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nrxp-p6rx-8kdd
45
url VCID-p71t-er3d-9fdn
vulnerability_id VCID-p71t-er3d-9fdn
summary Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.
references
0
reference_url https://github.com/advisories/GHSA-hm2h-f456-6j88
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-hm2h-f456-6j88
1
reference_url https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html
2
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/05/22/1
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33512, GHSA-hm2h-f456-6j88, PYSEC-2021-84
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p71t-er3d-9fdn
46
url VCID-pb2y-jwn1-wbck
vulnerability_id VCID-pb2y-jwn1-wbck
summary python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1194.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-1194.html
1
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
2
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
3
reference_url https://plone.org/products/plone/security/advisories/20121106/04
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/04
4
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5488, PYSEC-2014-30
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pb2y-jwn1-wbck
47
url VCID-pgrv-sncf-cqca
vulnerability_id VCID-pgrv-sncf-cqca
summary python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access.
references
0
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
1
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-48.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-48.yaml
3
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
4
reference_url https://plone.org/products/plone/security/advisories/20121106/22
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/22
5
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5506
reference_id CVE-2012-5506
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5506
7
reference_url https://github.com/advisories/GHSA-79hj-474h-v4xv
reference_id GHSA-79hj-474h-v4xv
reference_type
scores
url https://github.com/advisories/GHSA-79hj-474h-v4xv
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5506, GHSA-79hj-474h-v4xv, PYSEC-2014-48
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pgrv-sncf-cqca
48
url VCID-pzke-4by2-w3hk
vulnerability_id VCID-pzke-4by2-w3hk
summary Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.
references
0
reference_url https://plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content
1
reference_url http://www.openwall.com/lists/oss-security/2016/04/20/2
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/04/20/2
fixed_packages
0
url pkg:pypi/plone@5.1a2
purl pkg:pypi/plone@5.1a2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-5ry7-xy6b-5fag
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8wkk-84ky-17ak
5
vulnerability VCID-951j-w95x-83g8
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-dg61-tw4u-dbcc
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-p71t-er3d-9fdn
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1a2
aliases CVE-2016-4042, PYSEC-2017-56
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pzke-4by2-w3hk
49
url VCID-q7nt-b3s9-9kf6
vulnerability_id VCID-q7nt-b3s9-9kf6
summary Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.
references
0
reference_url https://github.com/advisories/GHSA-35rg-466w-77h3
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-35rg-466w-77h3
1
reference_url https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots
2
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/05/22/1
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33507, GHSA-35rg-466w-77h3, PYSEC-2021-79
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q7nt-b3s9-9kf6
50
url VCID-r52t-hx1j-ufa1
vulnerability_id VCID-r52t-hx1j-ufa1
summary Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.
references
0
reference_url https://github.com/advisories/GHSA-rmpv-rcp6-v8wc
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-rmpv-rcp6-v8wc
1
reference_url https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname
2
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/05/22/1
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33508, GHSA-rmpv-rcp6-v8wc, PYSEC-2021-80
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r52t-hx1j-ufa1
51
url VCID-s84e-bb7w-5qht
vulnerability_id VCID-s84e-bb7w-5qht
summary member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978478
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978478
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4197, PYSEC-2014-61
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s84e-bb7w-5qht
52
url VCID-shjb-m9k6-uuf1
vulnerability_id VCID-shjb-m9k6-uuf1
summary (1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978482
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978482
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
4
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-63.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-63.yaml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4199
reference_id CVE-2013-4199
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2013-4199
7
reference_url https://github.com/advisories/GHSA-xfjq-9rxq-ph6m
reference_id GHSA-xfjq-9rxq-ph6m
reference_type
scores
url https://github.com/advisories/GHSA-xfjq-9rxq-ph6m
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4199, GHSA-xfjq-9rxq-ph6m, PYSEC-2014-63
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-shjb-m9k6-uuf1
53
url VCID-svbc-dj3m-t7av
vulnerability_id VCID-svbc-dj3m-t7av
summary membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1194.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-1194.html
1
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
2
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
3
reference_url https://plone.org/products/plone/security/advisories/20121106/13
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/13
4
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5497, PYSEC-2014-39
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-svbc-dj3m-t7av
54
url VCID-tc7w-wttv-vfed
vulnerability_id VCID-tc7w-wttv-vfed
summary The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG reseeding issue in Zope.
references
0
reference_url https://bugs.launchpad.net/zope2/+bug/1071067
reference_id
reference_type
scores
url https://bugs.launchpad.net/zope2/+bug/1071067
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
2
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-50.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-50.yaml
4
reference_url https://plone.org/products/plone-hotfix/releases/20121124
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121124
5
reference_url https://plone.org/products/plone/security/advisories/20121106/24
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/24
6
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5508
reference_id CVE-2012-5508
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5508
8
reference_url https://github.com/advisories/GHSA-wprr-mc54-c62q
reference_id GHSA-wprr-mc54-c62q
reference_type
scores
url https://github.com/advisories/GHSA-wprr-mc54-c62q
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5508, GHSA-wprr-mc54-c62q, PYSEC-2014-50
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tc7w-wttv-vfed
55
url VCID-ud5f-7gx8-83d6
vulnerability_id VCID-ud5f-7gx8-83d6
summary The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote attackers to obtain sensitive information via a crafted request.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978475
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978475
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
4
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-60.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-60.yaml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4196
reference_id CVE-2013-4196
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2013-4196
7
reference_url https://github.com/advisories/GHSA-qphh-5fv5-2mjj
reference_id GHSA-qphh-5fv5-2mjj
reference_type
scores
url https://github.com/advisories/GHSA-qphh-5fv5-2mjj
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4196, GHSA-qphh-5fv5-2mjj, PYSEC-2014-60
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ud5f-7gx8-83d6
56
url VCID-uqe7-n3uh-zfac
vulnerability_id VCID-uqe7-n3uh-zfac
summary Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
references
0
reference_url http://osvdb.org/72727
reference_id
reference_type
scores
url http://osvdb.org/72727
1
reference_url http://plone.org/products/plone/security/advisories/CVE-2011-1948
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/CVE-2011-1948
2
reference_url https://access.redhat.com/errata/RHSA-2012:0151
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0151
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=711494
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=711494
4
reference_url http://secunia.com/advisories/44775
reference_id
reference_type
scores
url http://secunia.com/advisories/44775
5
reference_url http://secunia.com/advisories/44776
reference_id
reference_type
scores
url http://secunia.com/advisories/44776
6
reference_url http://securityreason.com/securityalert/8269
reference_id
reference_type
scores
url http://securityreason.com/securityalert/8269
7
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/67693
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/67693
8
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-14.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-14.yaml
9
reference_url http://www.securityfocus.com/archive/1/518155/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/518155/100/0/threaded
10
reference_url http://www.securityfocus.com/bid/48005
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/48005
11
reference_url https://access.redhat.com/security/cve/CVE-2011-1948
reference_id CVE-2011-1948
reference_type
scores
url https://access.redhat.com/security/cve/CVE-2011-1948
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-1948
reference_id CVE-2011-1948
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2011-1948
13
reference_url https://github.com/advisories/GHSA-p7h9-vf92-5fj5
reference_id GHSA-p7h9-vf92-5fj5
reference_type
scores
url https://github.com/advisories/GHSA-p7h9-vf92-5fj5
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
aliases CVE-2011-1948, GHSA-p7h9-vf92-5fj5, PYSEC-2011-14
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uqe7-n3uh-zfac
57
url VCID-uykg-p1e9-mfd8
vulnerability_id VCID-uykg-p1e9-mfd8
summary python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (memory consumption) via a large value, related to formatColumns.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1194.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-1194.html
1
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
2
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
3
reference_url https://plone.org/products/plone/security/advisories/20121106/15
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/15
4
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5499, PYSEC-2014-41
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uykg-p1e9-mfd8
58
url VCID-vgga-a2ga-t3hw
vulnerability_id VCID-vgga-a2ga-t3hw
summary Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unspecified input in the (1) browser_id_manager or (2) OFS.Image method.
references
0
reference_url http://seclists.org/oss-sec/2013/q4/467
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q4/467
1
reference_url http://seclists.org/oss-sec/2013/q4/485
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q4/485
2
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/89623
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/89623
3
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/89627
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/89627
4
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-218.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-218.yaml
6
reference_url https://plone.org/security/20131210/zope-xss-in-browseridmanager
reference_id
reference_type
scores
url https://plone.org/security/20131210/zope-xss-in-browseridmanager
7
reference_url https://plone.org/security/20131210/zope-xss-in-OFS
reference_id
reference_type
scores
url https://plone.org/security/20131210/zope-xss-in-OFS
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-7062
reference_id CVE-2013-7062
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2013-7062
9
reference_url https://github.com/advisories/GHSA-4793-w44w-m7xm
reference_id GHSA-4793-w44w-m7xm
reference_type
scores
url https://github.com/advisories/GHSA-4793-w44w-m7xm
fixed_packages
0
url pkg:pypi/plone@3.3.6
purl pkg:pypi/plone@3.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9kgy-2mwu-6yhd
12
vulnerability VCID-9u27-bf7b-x7er
13
vulnerability VCID-ax8a-2g7j-6ya2
14
vulnerability VCID-ay85-551m-vfej
15
vulnerability VCID-basq-jjsf-3fbd
16
vulnerability VCID-chqa-wbu7-eyak
17
vulnerability VCID-cpwq-sq8b-4yhf
18
vulnerability VCID-d42u-s7za-a3ad
19
vulnerability VCID-dg61-tw4u-dbcc
20
vulnerability VCID-dxqw-uf6r-vbbh
21
vulnerability VCID-edq7-7ncc-mbfx
22
vulnerability VCID-eg2r-ez9f-hkak
23
vulnerability VCID-eu4z-htaq-c3d6
24
vulnerability VCID-exan-4j3e-2qeh
25
vulnerability VCID-fdpc-runu-ekah
26
vulnerability VCID-fqcf-4say-h7g8
27
vulnerability VCID-g2ap-vh6r-yqds
28
vulnerability VCID-g6ky-pfur-7kfg
29
vulnerability VCID-gdtw-2d1s-2bbw
30
vulnerability VCID-h4kd-eh8g-gude
31
vulnerability VCID-h8ur-tnzd-afay
32
vulnerability VCID-hb93-ea78-8ygv
33
vulnerability VCID-hhux-xufk-ube2
34
vulnerability VCID-hygx-6n52-u7fz
35
vulnerability VCID-jhw6-wxz2-qbgd
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vgga-a2ga-t3hw
58
vulnerability VCID-vr9k-9xch-4yc7
59
vulnerability VCID-w2mv-zekv-8fcv
60
vulnerability VCID-wuas-tkd4-rkd4
61
vulnerability VCID-x2xm-hpc2-uubq
62
vulnerability VCID-x6y6-xx1a-7kfd
63
vulnerability VCID-x8n5-qj35-eqb1
64
vulnerability VCID-xpq8-npn5-kyb9
65
vulnerability VCID-yfkz-3xu3-vyc9
66
vulnerability VCID-yhzr-hb68-cfd6
67
vulnerability VCID-ykmg-jcfe-8qf4
68
vulnerability VCID-yuph-y2fa-3uaa
69
vulnerability VCID-zd73-fvwg-nbgx
70
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.6
1
url pkg:pypi/plone@4.0a1
purl pkg:pypi/plone@4.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9kgy-2mwu-6yhd
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-basq-jjsf-3fbd
14
vulnerability VCID-chqa-wbu7-eyak
15
vulnerability VCID-cpwq-sq8b-4yhf
16
vulnerability VCID-d42u-s7za-a3ad
17
vulnerability VCID-dg61-tw4u-dbcc
18
vulnerability VCID-dxqw-uf6r-vbbh
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eg2r-ez9f-hkak
21
vulnerability VCID-eu4z-htaq-c3d6
22
vulnerability VCID-exan-4j3e-2qeh
23
vulnerability VCID-fdpc-runu-ekah
24
vulnerability VCID-g2ap-vh6r-yqds
25
vulnerability VCID-g6ky-pfur-7kfg
26
vulnerability VCID-gdtw-2d1s-2bbw
27
vulnerability VCID-h8ur-tnzd-afay
28
vulnerability VCID-hb93-ea78-8ygv
29
vulnerability VCID-hhux-xufk-ube2
30
vulnerability VCID-hygx-6n52-u7fz
31
vulnerability VCID-jhw6-wxz2-qbgd
32
vulnerability VCID-jvwn-yw13-gfe9
33
vulnerability VCID-khhr-m295-23gs
34
vulnerability VCID-khsn-43tn-37bx
35
vulnerability VCID-krfw-xa2b-vue5
36
vulnerability VCID-kz14-79we-xbfe
37
vulnerability VCID-mt5t-3gsw-7fde
38
vulnerability VCID-n4nh-4rq4-r7hx
39
vulnerability VCID-nrxp-p6rx-8kdd
40
vulnerability VCID-p71t-er3d-9fdn
41
vulnerability VCID-pb2y-jwn1-wbck
42
vulnerability VCID-pgrv-sncf-cqca
43
vulnerability VCID-pzke-4by2-w3hk
44
vulnerability VCID-q7nt-b3s9-9kf6
45
vulnerability VCID-r52t-hx1j-ufa1
46
vulnerability VCID-s84e-bb7w-5qht
47
vulnerability VCID-shjb-m9k6-uuf1
48
vulnerability VCID-svbc-dj3m-t7av
49
vulnerability VCID-tc7w-wttv-vfed
50
vulnerability VCID-ud5f-7gx8-83d6
51
vulnerability VCID-uqe7-n3uh-zfac
52
vulnerability VCID-uykg-p1e9-mfd8
53
vulnerability VCID-vr9k-9xch-4yc7
54
vulnerability VCID-w2mv-zekv-8fcv
55
vulnerability VCID-x2xm-hpc2-uubq
56
vulnerability VCID-x6y6-xx1a-7kfd
57
vulnerability VCID-x8n5-qj35-eqb1
58
vulnerability VCID-xpq8-npn5-kyb9
59
vulnerability VCID-yfkz-3xu3-vyc9
60
vulnerability VCID-yhzr-hb68-cfd6
61
vulnerability VCID-ykmg-jcfe-8qf4
62
vulnerability VCID-yuph-y2fa-3uaa
63
vulnerability VCID-zd73-fvwg-nbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0a1
2
url pkg:pypi/plone@4.0.9
purl pkg:pypi/plone@4.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9gu8-dgkr-sua3
12
vulnerability VCID-9kgy-2mwu-6yhd
13
vulnerability VCID-9u27-bf7b-x7er
14
vulnerability VCID-ax8a-2g7j-6ya2
15
vulnerability VCID-ay85-551m-vfej
16
vulnerability VCID-basq-jjsf-3fbd
17
vulnerability VCID-bmwk-nutp-r3fs
18
vulnerability VCID-chqa-wbu7-eyak
19
vulnerability VCID-cpwq-sq8b-4yhf
20
vulnerability VCID-d42u-s7za-a3ad
21
vulnerability VCID-dg61-tw4u-dbcc
22
vulnerability VCID-dxqw-uf6r-vbbh
23
vulnerability VCID-edq7-7ncc-mbfx
24
vulnerability VCID-eg2r-ez9f-hkak
25
vulnerability VCID-eu4z-htaq-c3d6
26
vulnerability VCID-exan-4j3e-2qeh
27
vulnerability VCID-fdpc-runu-ekah
28
vulnerability VCID-g2ap-vh6r-yqds
29
vulnerability VCID-g6ky-pfur-7kfg
30
vulnerability VCID-gdtw-2d1s-2bbw
31
vulnerability VCID-h4kd-eh8g-gude
32
vulnerability VCID-h8ur-tnzd-afay
33
vulnerability VCID-hb93-ea78-8ygv
34
vulnerability VCID-hhux-xufk-ube2
35
vulnerability VCID-hygx-6n52-u7fz
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vgga-a2ga-t3hw
58
vulnerability VCID-vr9k-9xch-4yc7
59
vulnerability VCID-w2mv-zekv-8fcv
60
vulnerability VCID-wuas-tkd4-rkd4
61
vulnerability VCID-x2xm-hpc2-uubq
62
vulnerability VCID-x6y6-xx1a-7kfd
63
vulnerability VCID-x8n5-qj35-eqb1
64
vulnerability VCID-xpq8-npn5-kyb9
65
vulnerability VCID-yfkz-3xu3-vyc9
66
vulnerability VCID-yhzr-hb68-cfd6
67
vulnerability VCID-ykmg-jcfe-8qf4
68
vulnerability VCID-yuph-y2fa-3uaa
69
vulnerability VCID-zd73-fvwg-nbgx
70
vulnerability VCID-zwnj-revc-vbd6
71
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.9
3
url pkg:pypi/plone@4.0.10
purl pkg:pypi/plone@4.0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9gu8-dgkr-sua3
12
vulnerability VCID-9kgy-2mwu-6yhd
13
vulnerability VCID-9u27-bf7b-x7er
14
vulnerability VCID-ax8a-2g7j-6ya2
15
vulnerability VCID-ay85-551m-vfej
16
vulnerability VCID-basq-jjsf-3fbd
17
vulnerability VCID-bmwk-nutp-r3fs
18
vulnerability VCID-chqa-wbu7-eyak
19
vulnerability VCID-cpwq-sq8b-4yhf
20
vulnerability VCID-d42u-s7za-a3ad
21
vulnerability VCID-dg61-tw4u-dbcc
22
vulnerability VCID-dxqw-uf6r-vbbh
23
vulnerability VCID-edq7-7ncc-mbfx
24
vulnerability VCID-eg2r-ez9f-hkak
25
vulnerability VCID-eu4z-htaq-c3d6
26
vulnerability VCID-exan-4j3e-2qeh
27
vulnerability VCID-fdpc-runu-ekah
28
vulnerability VCID-g2ap-vh6r-yqds
29
vulnerability VCID-g6ky-pfur-7kfg
30
vulnerability VCID-gdtw-2d1s-2bbw
31
vulnerability VCID-h4kd-eh8g-gude
32
vulnerability VCID-h8ur-tnzd-afay
33
vulnerability VCID-hb93-ea78-8ygv
34
vulnerability VCID-hhux-xufk-ube2
35
vulnerability VCID-hygx-6n52-u7fz
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vr9k-9xch-4yc7
58
vulnerability VCID-w2mv-zekv-8fcv
59
vulnerability VCID-wuas-tkd4-rkd4
60
vulnerability VCID-x2xm-hpc2-uubq
61
vulnerability VCID-x6y6-xx1a-7kfd
62
vulnerability VCID-x8n5-qj35-eqb1
63
vulnerability VCID-xpq8-npn5-kyb9
64
vulnerability VCID-yfkz-3xu3-vyc9
65
vulnerability VCID-yhzr-hb68-cfd6
66
vulnerability VCID-ykmg-jcfe-8qf4
67
vulnerability VCID-yuph-y2fa-3uaa
68
vulnerability VCID-zd73-fvwg-nbgx
69
vulnerability VCID-zwnj-revc-vbd6
70
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0.10
4
url pkg:pypi/plone@4.1.6
purl pkg:pypi/plone@4.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-zd73-fvwg-nbgx
53
vulnerability VCID-zwnj-revc-vbd6
54
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.6
5
url pkg:pypi/plone@4.2a1
purl pkg:pypi/plone@4.2a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-b2az-q6wv-eyhw
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-chqa-wbu7-eyak
14
vulnerability VCID-cpwq-sq8b-4yhf
15
vulnerability VCID-d42u-s7za-a3ad
16
vulnerability VCID-dg61-tw4u-dbcc
17
vulnerability VCID-dxqw-uf6r-vbbh
18
vulnerability VCID-edq7-7ncc-mbfx
19
vulnerability VCID-eg2r-ez9f-hkak
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-g2ap-vh6r-yqds
24
vulnerability VCID-g6ky-pfur-7kfg
25
vulnerability VCID-gdtw-2d1s-2bbw
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vr9k-9xch-4yc7
45
vulnerability VCID-w2mv-zekv-8fcv
46
vulnerability VCID-x2xm-hpc2-uubq
47
vulnerability VCID-x6y6-xx1a-7kfd
48
vulnerability VCID-xpq8-npn5-kyb9
49
vulnerability VCID-yfkz-3xu3-vyc9
50
vulnerability VCID-zd73-fvwg-nbgx
51
vulnerability VCID-zwnj-revc-vbd6
52
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2a1
6
url pkg:pypi/plone@4.3a1
purl pkg:pypi/plone@4.3a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-2sk4-yc6h-17c4
2
vulnerability VCID-5n6e-cha8-nyb8
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-6568-4ert-1bau
5
vulnerability VCID-69ps-uetw-y3gf
6
vulnerability VCID-8rp3-p3qe-x7ej
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-9kgy-2mwu-6yhd
9
vulnerability VCID-ax8a-2g7j-6ya2
10
vulnerability VCID-ay85-551m-vfej
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-chqa-wbu7-eyak
14
vulnerability VCID-cpwq-sq8b-4yhf
15
vulnerability VCID-d42u-s7za-a3ad
16
vulnerability VCID-dg61-tw4u-dbcc
17
vulnerability VCID-dxqw-uf6r-vbbh
18
vulnerability VCID-edq7-7ncc-mbfx
19
vulnerability VCID-eg2r-ez9f-hkak
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-g2ap-vh6r-yqds
24
vulnerability VCID-g6ky-pfur-7kfg
25
vulnerability VCID-gdtw-2d1s-2bbw
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mn7t-zgfw-tqfw
34
vulnerability VCID-mt5t-3gsw-7fde
35
vulnerability VCID-n4nh-4rq4-r7hx
36
vulnerability VCID-p71t-er3d-9fdn
37
vulnerability VCID-pb2y-jwn1-wbck
38
vulnerability VCID-pgrv-sncf-cqca
39
vulnerability VCID-pzke-4by2-w3hk
40
vulnerability VCID-q7nt-b3s9-9kf6
41
vulnerability VCID-r52t-hx1j-ufa1
42
vulnerability VCID-svbc-dj3m-t7av
43
vulnerability VCID-tc7w-wttv-vfed
44
vulnerability VCID-uykg-p1e9-mfd8
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-x2xm-hpc2-uubq
48
vulnerability VCID-x6y6-xx1a-7kfd
49
vulnerability VCID-xpq8-npn5-kyb9
50
vulnerability VCID-yfkz-3xu3-vyc9
51
vulnerability VCID-zd73-fvwg-nbgx
52
vulnerability VCID-zwnj-revc-vbd6
53
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3a1
7
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
8
url pkg:pypi/plone@4.3.3
purl pkg:pypi/plone@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-p71t-er3d-9fdn
24
vulnerability VCID-pzke-4by2-w3hk
25
vulnerability VCID-q7nt-b3s9-9kf6
26
vulnerability VCID-r52t-hx1j-ufa1
27
vulnerability VCID-wuas-tkd4-rkd4
28
vulnerability VCID-x2xm-hpc2-uubq
29
vulnerability VCID-yfkz-3xu3-vyc9
30
vulnerability VCID-z4jt-v88h-77er
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.3
aliases CVE-2013-7062, GHSA-4793-w44w-m7xm, PYSEC-2020-218
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vgga-a2ga-t3hw
59
url VCID-vr9k-9xch-4yc7
vulnerability_id VCID-vr9k-9xch-4yc7
summary ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors.
references
0
reference_url https://github.com/advisories/GHSA-prr5-pfr8-q9f3
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-prr5-pfr8-q9f3
1
reference_url https://github.com/plone/Products.CMFPlone
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone
2
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-45.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-45.yaml
4
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
5
reference_url https://plone.org/products/plone/security/advisories/20121106/19
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/19
6
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5503
reference_id CVE-2012-5503
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5503
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5503, GHSA-prr5-pfr8-q9f3, PYSEC-2014-45
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vr9k-9xch-4yc7
60
url VCID-w2mv-zekv-8fcv
vulnerability_id VCID-w2mv-zekv-8fcv
summary Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
references
0
reference_url https://github.com/plone/Products.CMFPlone
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone
1
reference_url https://github.com/plone/Products.CMFPlone/commit/a6a3e50f759da7e7ca46e50777a35e51f4d8ed48
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/commit/a6a3e50f759da7e7ca46e50777a35e51f4d8ed48
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-66.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-66.yaml
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/products-cmfplone/PYSEC-2014-68.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/products-cmfplone/PYSEC-2014-68.yaml
4
reference_url https://plone.org/security/20131210/catalogue-exposure
reference_id
reference_type
scores
url https://plone.org/security/20131210/catalogue-exposure
5
reference_url https://pypi.org/project/Products.PloneHotfix20131210
reference_id
reference_type
scores
url https://pypi.org/project/Products.PloneHotfix20131210
6
reference_url http://www.openwall.com/lists/oss-security/2013/12/10/15
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2013/12/10/15
7
reference_url http://www.openwall.com/lists/oss-security/2013/12/12/3
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2013/12/12/3
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-7061
reference_id CVE-2013-7061
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2013-7061
9
reference_url https://github.com/advisories/GHSA-4vr8-r7qr-fpvq
reference_id GHSA-4vr8-r7qr-fpvq
reference_type
scores
url https://github.com/advisories/GHSA-4vr8-r7qr-fpvq
fixed_packages
0
url pkg:pypi/plone@4.3.3
purl pkg:pypi/plone@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-p71t-er3d-9fdn
24
vulnerability VCID-pzke-4by2-w3hk
25
vulnerability VCID-q7nt-b3s9-9kf6
26
vulnerability VCID-r52t-hx1j-ufa1
27
vulnerability VCID-wuas-tkd4-rkd4
28
vulnerability VCID-x2xm-hpc2-uubq
29
vulnerability VCID-yfkz-3xu3-vyc9
30
vulnerability VCID-z4jt-v88h-77er
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.3
aliases CVE-2013-7061, GHSA-4vr8-r7qr-fpvq, PYSEC-2014-66, PYSEC-2014-68
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w2mv-zekv-8fcv
61
url VCID-wuas-tkd4-rkd4
vulnerability_id VCID-wuas-tkd4-rkd4
summary Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator.
references
0
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1264791
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1264791
1
reference_url https://github.com/zopefoundation/Products.CMFCore/commit/e1d981bfa14b664317285f0f36498f4be4a23406
reference_id
reference_type
scores
url https://github.com/zopefoundation/Products.CMFCore/commit/e1d981bfa14b664317285f0f36498f4be4a23406
2
reference_url https://plone.org/security/20150910
reference_id
reference_type
scores
url https://plone.org/security/20150910
3
reference_url https://plone.org/security/20150910/anonymous-is-able-to-create-plone-members
reference_id
reference_type
scores
url https://plone.org/security/20150910/anonymous-is-able-to-create-plone-members
4
reference_url https://plone.org/security/hotfix/20150910/anonymous-is-able-to-create-plone-members
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20150910/anonymous-is-able-to-create-plone-members
5
reference_url https://pypi.python.org/pypi/Products.PloneHotfix20150910
reference_id
reference_type
scores
url https://pypi.python.org/pypi/Products.PloneHotfix20150910
6
reference_url http://www.openwall.com/lists/oss-security/2015/09/22/13
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/09/22/13
fixed_packages
0
url pkg:pypi/plone@4.0a1
purl pkg:pypi/plone@4.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9kgy-2mwu-6yhd
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-basq-jjsf-3fbd
14
vulnerability VCID-chqa-wbu7-eyak
15
vulnerability VCID-cpwq-sq8b-4yhf
16
vulnerability VCID-d42u-s7za-a3ad
17
vulnerability VCID-dg61-tw4u-dbcc
18
vulnerability VCID-dxqw-uf6r-vbbh
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eg2r-ez9f-hkak
21
vulnerability VCID-eu4z-htaq-c3d6
22
vulnerability VCID-exan-4j3e-2qeh
23
vulnerability VCID-fdpc-runu-ekah
24
vulnerability VCID-g2ap-vh6r-yqds
25
vulnerability VCID-g6ky-pfur-7kfg
26
vulnerability VCID-gdtw-2d1s-2bbw
27
vulnerability VCID-h8ur-tnzd-afay
28
vulnerability VCID-hb93-ea78-8ygv
29
vulnerability VCID-hhux-xufk-ube2
30
vulnerability VCID-hygx-6n52-u7fz
31
vulnerability VCID-jhw6-wxz2-qbgd
32
vulnerability VCID-jvwn-yw13-gfe9
33
vulnerability VCID-khhr-m295-23gs
34
vulnerability VCID-khsn-43tn-37bx
35
vulnerability VCID-krfw-xa2b-vue5
36
vulnerability VCID-kz14-79we-xbfe
37
vulnerability VCID-mt5t-3gsw-7fde
38
vulnerability VCID-n4nh-4rq4-r7hx
39
vulnerability VCID-nrxp-p6rx-8kdd
40
vulnerability VCID-p71t-er3d-9fdn
41
vulnerability VCID-pb2y-jwn1-wbck
42
vulnerability VCID-pgrv-sncf-cqca
43
vulnerability VCID-pzke-4by2-w3hk
44
vulnerability VCID-q7nt-b3s9-9kf6
45
vulnerability VCID-r52t-hx1j-ufa1
46
vulnerability VCID-s84e-bb7w-5qht
47
vulnerability VCID-shjb-m9k6-uuf1
48
vulnerability VCID-svbc-dj3m-t7av
49
vulnerability VCID-tc7w-wttv-vfed
50
vulnerability VCID-ud5f-7gx8-83d6
51
vulnerability VCID-uqe7-n3uh-zfac
52
vulnerability VCID-uykg-p1e9-mfd8
53
vulnerability VCID-vr9k-9xch-4yc7
54
vulnerability VCID-w2mv-zekv-8fcv
55
vulnerability VCID-x2xm-hpc2-uubq
56
vulnerability VCID-x6y6-xx1a-7kfd
57
vulnerability VCID-x8n5-qj35-eqb1
58
vulnerability VCID-xpq8-npn5-kyb9
59
vulnerability VCID-yfkz-3xu3-vyc9
60
vulnerability VCID-yhzr-hb68-cfd6
61
vulnerability VCID-ykmg-jcfe-8qf4
62
vulnerability VCID-yuph-y2fa-3uaa
63
vulnerability VCID-zd73-fvwg-nbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0a1
1
url pkg:pypi/plone@4.1a1
purl pkg:pypi/plone@4.1a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9gu8-dgkr-sua3
12
vulnerability VCID-9kgy-2mwu-6yhd
13
vulnerability VCID-9u27-bf7b-x7er
14
vulnerability VCID-ax8a-2g7j-6ya2
15
vulnerability VCID-ay85-551m-vfej
16
vulnerability VCID-basq-jjsf-3fbd
17
vulnerability VCID-bmwk-nutp-r3fs
18
vulnerability VCID-chqa-wbu7-eyak
19
vulnerability VCID-cpwq-sq8b-4yhf
20
vulnerability VCID-d42u-s7za-a3ad
21
vulnerability VCID-dg61-tw4u-dbcc
22
vulnerability VCID-dxqw-uf6r-vbbh
23
vulnerability VCID-edq7-7ncc-mbfx
24
vulnerability VCID-eg2r-ez9f-hkak
25
vulnerability VCID-eu4z-htaq-c3d6
26
vulnerability VCID-exan-4j3e-2qeh
27
vulnerability VCID-fdpc-runu-ekah
28
vulnerability VCID-g2ap-vh6r-yqds
29
vulnerability VCID-g6ky-pfur-7kfg
30
vulnerability VCID-gdtw-2d1s-2bbw
31
vulnerability VCID-h8ur-tnzd-afay
32
vulnerability VCID-hb93-ea78-8ygv
33
vulnerability VCID-hhux-xufk-ube2
34
vulnerability VCID-hygx-6n52-u7fz
35
vulnerability VCID-jvwn-yw13-gfe9
36
vulnerability VCID-khhr-m295-23gs
37
vulnerability VCID-khsn-43tn-37bx
38
vulnerability VCID-krfw-xa2b-vue5
39
vulnerability VCID-kz14-79we-xbfe
40
vulnerability VCID-mt5t-3gsw-7fde
41
vulnerability VCID-n4nh-4rq4-r7hx
42
vulnerability VCID-nrxp-p6rx-8kdd
43
vulnerability VCID-p71t-er3d-9fdn
44
vulnerability VCID-pb2y-jwn1-wbck
45
vulnerability VCID-pgrv-sncf-cqca
46
vulnerability VCID-pzke-4by2-w3hk
47
vulnerability VCID-q7nt-b3s9-9kf6
48
vulnerability VCID-r52t-hx1j-ufa1
49
vulnerability VCID-s84e-bb7w-5qht
50
vulnerability VCID-shjb-m9k6-uuf1
51
vulnerability VCID-svbc-dj3m-t7av
52
vulnerability VCID-tc7w-wttv-vfed
53
vulnerability VCID-ud5f-7gx8-83d6
54
vulnerability VCID-uqe7-n3uh-zfac
55
vulnerability VCID-uykg-p1e9-mfd8
56
vulnerability VCID-vr9k-9xch-4yc7
57
vulnerability VCID-w2mv-zekv-8fcv
58
vulnerability VCID-x2xm-hpc2-uubq
59
vulnerability VCID-x6y6-xx1a-7kfd
60
vulnerability VCID-x8n5-qj35-eqb1
61
vulnerability VCID-xpq8-npn5-kyb9
62
vulnerability VCID-yfkz-3xu3-vyc9
63
vulnerability VCID-yhzr-hb68-cfd6
64
vulnerability VCID-ykmg-jcfe-8qf4
65
vulnerability VCID-yuph-y2fa-3uaa
66
vulnerability VCID-zd73-fvwg-nbgx
67
vulnerability VCID-zwnj-revc-vbd6
68
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1a1
2
url pkg:pypi/plone@4.2a1
purl pkg:pypi/plone@4.2a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-b2az-q6wv-eyhw
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-chqa-wbu7-eyak
14
vulnerability VCID-cpwq-sq8b-4yhf
15
vulnerability VCID-d42u-s7za-a3ad
16
vulnerability VCID-dg61-tw4u-dbcc
17
vulnerability VCID-dxqw-uf6r-vbbh
18
vulnerability VCID-edq7-7ncc-mbfx
19
vulnerability VCID-eg2r-ez9f-hkak
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-g2ap-vh6r-yqds
24
vulnerability VCID-g6ky-pfur-7kfg
25
vulnerability VCID-gdtw-2d1s-2bbw
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vr9k-9xch-4yc7
45
vulnerability VCID-w2mv-zekv-8fcv
46
vulnerability VCID-x2xm-hpc2-uubq
47
vulnerability VCID-x6y6-xx1a-7kfd
48
vulnerability VCID-xpq8-npn5-kyb9
49
vulnerability VCID-yfkz-3xu3-vyc9
50
vulnerability VCID-zd73-fvwg-nbgx
51
vulnerability VCID-zwnj-revc-vbd6
52
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2a1
3
url pkg:pypi/plone@4.3a1
purl pkg:pypi/plone@4.3a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-2sk4-yc6h-17c4
2
vulnerability VCID-5n6e-cha8-nyb8
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-6568-4ert-1bau
5
vulnerability VCID-69ps-uetw-y3gf
6
vulnerability VCID-8rp3-p3qe-x7ej
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-9kgy-2mwu-6yhd
9
vulnerability VCID-ax8a-2g7j-6ya2
10
vulnerability VCID-ay85-551m-vfej
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-chqa-wbu7-eyak
14
vulnerability VCID-cpwq-sq8b-4yhf
15
vulnerability VCID-d42u-s7za-a3ad
16
vulnerability VCID-dg61-tw4u-dbcc
17
vulnerability VCID-dxqw-uf6r-vbbh
18
vulnerability VCID-edq7-7ncc-mbfx
19
vulnerability VCID-eg2r-ez9f-hkak
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-g2ap-vh6r-yqds
24
vulnerability VCID-g6ky-pfur-7kfg
25
vulnerability VCID-gdtw-2d1s-2bbw
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mn7t-zgfw-tqfw
34
vulnerability VCID-mt5t-3gsw-7fde
35
vulnerability VCID-n4nh-4rq4-r7hx
36
vulnerability VCID-p71t-er3d-9fdn
37
vulnerability VCID-pb2y-jwn1-wbck
38
vulnerability VCID-pgrv-sncf-cqca
39
vulnerability VCID-pzke-4by2-w3hk
40
vulnerability VCID-q7nt-b3s9-9kf6
41
vulnerability VCID-r52t-hx1j-ufa1
42
vulnerability VCID-svbc-dj3m-t7av
43
vulnerability VCID-tc7w-wttv-vfed
44
vulnerability VCID-uykg-p1e9-mfd8
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-x2xm-hpc2-uubq
48
vulnerability VCID-x6y6-xx1a-7kfd
49
vulnerability VCID-xpq8-npn5-kyb9
50
vulnerability VCID-yfkz-3xu3-vyc9
51
vulnerability VCID-zd73-fvwg-nbgx
52
vulnerability VCID-zwnj-revc-vbd6
53
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3a1
4
url pkg:pypi/plone@4.3.7
purl pkg:pypi/plone@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-j8fv-uhxw-jkcw
21
vulnerability VCID-mn7t-zgfw-tqfw
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-z4jt-v88h-77er
29
vulnerability VCID-zwnj-revc-vbd6
30
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.7
5
url pkg:pypi/plone@5.0rc2
purl pkg:pypi/plone@5.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6568-4ert-1bau
1
vulnerability VCID-8rp3-p3qe-x7ej
2
vulnerability VCID-8wkk-84ky-17ak
3
vulnerability VCID-9gu8-dgkr-sua3
4
vulnerability VCID-ax8a-2g7j-6ya2
5
vulnerability VCID-basq-jjsf-3fbd
6
vulnerability VCID-bmwk-nutp-r3fs
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-edq7-7ncc-mbfx
9
vulnerability VCID-eu4z-htaq-c3d6
10
vulnerability VCID-exan-4j3e-2qeh
11
vulnerability VCID-fdpc-runu-ekah
12
vulnerability VCID-j8fv-uhxw-jkcw
13
vulnerability VCID-jvvz-bafs-t7gc
14
vulnerability VCID-p71t-er3d-9fdn
15
vulnerability VCID-pzke-4by2-w3hk
16
vulnerability VCID-q7nt-b3s9-9kf6
17
vulnerability VCID-r52t-hx1j-ufa1
18
vulnerability VCID-x2xm-hpc2-uubq
19
vulnerability VCID-z4jt-v88h-77er
20
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0rc2
aliases CVE-2015-7315, PYSEC-2017-52
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wuas-tkd4-rkd4
62
url VCID-x2xm-hpc2-uubq
vulnerability_id VCID-x2xm-hpc2-uubq
summary Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script.
references
0
reference_url https://github.com/advisories/GHSA-hm2p-fhwx-9285
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-hm2p-fhwx-9285
1
reference_url https://plone.org/security/hotfix/20210518/writing-arbitrary-files-via-docutils-and-python-script
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20210518/writing-arbitrary-files-via-docutils-and-python-script
2
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/05/22/1
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33509, GHSA-hm2p-fhwx-9285, PYSEC-2021-81
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x2xm-hpc2-uubq
63
url VCID-x6y6-xx1a-7kfd
vulnerability_id VCID-x6y6-xx1a-7kfd
summary Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/18
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/18
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5502, PYSEC-2014-44
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x6y6-xx1a-7kfd
64
url VCID-x8n5-qj35-eqb1
vulnerability_id VCID-x8n5-qj35-eqb1
summary Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978451
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978451
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4190, PYSEC-2014-54
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x8n5-qj35-eqb1
65
url VCID-xcaz-c9xr-8bhv
vulnerability_id VCID-xcaz-c9xr-8bhv
summary Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transform.
references
0
reference_url http://plone.org/products/plone/security/advisories/cve-2010-unassigned-html-injection-in-safe_html
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/cve-2010-unassigned-html-injection-in-safe_html
1
reference_url http://secunia.com/advisories/40270
reference_id
reference_type
scores
url http://secunia.com/advisories/40270
2
reference_url http://www.securityfocus.com/bid/40999
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/40999
fixed_packages
0
url pkg:pypi/plone@3.3.5
purl pkg:pypi/plone@3.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9kgy-2mwu-6yhd
12
vulnerability VCID-9u27-bf7b-x7er
13
vulnerability VCID-ax8a-2g7j-6ya2
14
vulnerability VCID-ay85-551m-vfej
15
vulnerability VCID-basq-jjsf-3fbd
16
vulnerability VCID-chqa-wbu7-eyak
17
vulnerability VCID-cpwq-sq8b-4yhf
18
vulnerability VCID-d42u-s7za-a3ad
19
vulnerability VCID-dg61-tw4u-dbcc
20
vulnerability VCID-dxqw-uf6r-vbbh
21
vulnerability VCID-edq7-7ncc-mbfx
22
vulnerability VCID-eg2r-ez9f-hkak
23
vulnerability VCID-eu4z-htaq-c3d6
24
vulnerability VCID-exan-4j3e-2qeh
25
vulnerability VCID-fdpc-runu-ekah
26
vulnerability VCID-fqcf-4say-h7g8
27
vulnerability VCID-g2ap-vh6r-yqds
28
vulnerability VCID-g6ky-pfur-7kfg
29
vulnerability VCID-gdtw-2d1s-2bbw
30
vulnerability VCID-h4kd-eh8g-gude
31
vulnerability VCID-h8ur-tnzd-afay
32
vulnerability VCID-hb93-ea78-8ygv
33
vulnerability VCID-hhux-xufk-ube2
34
vulnerability VCID-hygx-6n52-u7fz
35
vulnerability VCID-jhw6-wxz2-qbgd
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mh7a-3p1f-9ufs
42
vulnerability VCID-mt5t-3gsw-7fde
43
vulnerability VCID-n4nh-4rq4-r7hx
44
vulnerability VCID-nrxp-p6rx-8kdd
45
vulnerability VCID-p71t-er3d-9fdn
46
vulnerability VCID-pb2y-jwn1-wbck
47
vulnerability VCID-pgrv-sncf-cqca
48
vulnerability VCID-pzke-4by2-w3hk
49
vulnerability VCID-q7nt-b3s9-9kf6
50
vulnerability VCID-r52t-hx1j-ufa1
51
vulnerability VCID-s84e-bb7w-5qht
52
vulnerability VCID-shjb-m9k6-uuf1
53
vulnerability VCID-svbc-dj3m-t7av
54
vulnerability VCID-tc7w-wttv-vfed
55
vulnerability VCID-ud5f-7gx8-83d6
56
vulnerability VCID-uqe7-n3uh-zfac
57
vulnerability VCID-uykg-p1e9-mfd8
58
vulnerability VCID-vgga-a2ga-t3hw
59
vulnerability VCID-vr9k-9xch-4yc7
60
vulnerability VCID-w2mv-zekv-8fcv
61
vulnerability VCID-wuas-tkd4-rkd4
62
vulnerability VCID-x2xm-hpc2-uubq
63
vulnerability VCID-x6y6-xx1a-7kfd
64
vulnerability VCID-x8n5-qj35-eqb1
65
vulnerability VCID-xpq8-npn5-kyb9
66
vulnerability VCID-yfkz-3xu3-vyc9
67
vulnerability VCID-yhzr-hb68-cfd6
68
vulnerability VCID-ykmg-jcfe-8qf4
69
vulnerability VCID-yuph-y2fa-3uaa
70
vulnerability VCID-z886-y25h-nua3
71
vulnerability VCID-zd73-fvwg-nbgx
72
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.5
aliases CVE-2010-2422, PYSEC-2010-19
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xcaz-c9xr-8bhv
66
url VCID-xpq8-npn5-kyb9
vulnerability_id VCID-xpq8-npn5-kyb9
summary z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/07
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/07
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5491, PYSEC-2014-33
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xpq8-npn5-kyb9
67
url VCID-yfkz-3xu3-vyc9
vulnerability_id VCID-yfkz-3xu3-vyc9
summary Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
references
0
reference_url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
reference_id
reference_type
scores
url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
1
reference_url http://seclists.org/fulldisclosure/2016/Oct/80
reference_id
reference_type
scores
url http://seclists.org/fulldisclosure/2016/Oct/80
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-62.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-62.yaml
4
reference_url https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone
5
reference_url https://web.archive.org/web/20201207134910/http://www.securityfocus.com/bid/92752
reference_id
reference_type
scores
url https://web.archive.org/web/20201207134910/http://www.securityfocus.com/bid/92752
6
reference_url https://web.archive.org/web/20201207134911/http://www.securityfocus.com/archive/1/539572/100/0/threaded
reference_id
reference_type
scores
url https://web.archive.org/web/20201207134911/http://www.securityfocus.com/archive/1/539572/100/0/threaded
7
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/4
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/09/05/4
8
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/5
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/09/05/5
9
reference_url http://www.securityfocus.com/archive/1/539572/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/539572/100/0/threaded
10
reference_url http://www.securityfocus.com/bid/92752
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/92752
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-7139
reference_id CVE-2016-7139
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2016-7139
12
reference_url https://github.com/advisories/GHSA-pp4c-2692-7f37
reference_id GHSA-pp4c-2692-7f37
reference_type
scores
url https://github.com/advisories/GHSA-pp4c-2692-7f37
fixed_packages
0
url pkg:pypi/plone@4.0a1
purl pkg:pypi/plone@4.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9kgy-2mwu-6yhd
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-basq-jjsf-3fbd
14
vulnerability VCID-chqa-wbu7-eyak
15
vulnerability VCID-cpwq-sq8b-4yhf
16
vulnerability VCID-d42u-s7za-a3ad
17
vulnerability VCID-dg61-tw4u-dbcc
18
vulnerability VCID-dxqw-uf6r-vbbh
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eg2r-ez9f-hkak
21
vulnerability VCID-eu4z-htaq-c3d6
22
vulnerability VCID-exan-4j3e-2qeh
23
vulnerability VCID-fdpc-runu-ekah
24
vulnerability VCID-g2ap-vh6r-yqds
25
vulnerability VCID-g6ky-pfur-7kfg
26
vulnerability VCID-gdtw-2d1s-2bbw
27
vulnerability VCID-h8ur-tnzd-afay
28
vulnerability VCID-hb93-ea78-8ygv
29
vulnerability VCID-hhux-xufk-ube2
30
vulnerability VCID-hygx-6n52-u7fz
31
vulnerability VCID-jhw6-wxz2-qbgd
32
vulnerability VCID-jvwn-yw13-gfe9
33
vulnerability VCID-khhr-m295-23gs
34
vulnerability VCID-khsn-43tn-37bx
35
vulnerability VCID-krfw-xa2b-vue5
36
vulnerability VCID-kz14-79we-xbfe
37
vulnerability VCID-mt5t-3gsw-7fde
38
vulnerability VCID-n4nh-4rq4-r7hx
39
vulnerability VCID-nrxp-p6rx-8kdd
40
vulnerability VCID-p71t-er3d-9fdn
41
vulnerability VCID-pb2y-jwn1-wbck
42
vulnerability VCID-pgrv-sncf-cqca
43
vulnerability VCID-pzke-4by2-w3hk
44
vulnerability VCID-q7nt-b3s9-9kf6
45
vulnerability VCID-r52t-hx1j-ufa1
46
vulnerability VCID-s84e-bb7w-5qht
47
vulnerability VCID-shjb-m9k6-uuf1
48
vulnerability VCID-svbc-dj3m-t7av
49
vulnerability VCID-tc7w-wttv-vfed
50
vulnerability VCID-ud5f-7gx8-83d6
51
vulnerability VCID-uqe7-n3uh-zfac
52
vulnerability VCID-uykg-p1e9-mfd8
53
vulnerability VCID-vr9k-9xch-4yc7
54
vulnerability VCID-w2mv-zekv-8fcv
55
vulnerability VCID-x2xm-hpc2-uubq
56
vulnerability VCID-x6y6-xx1a-7kfd
57
vulnerability VCID-x8n5-qj35-eqb1
58
vulnerability VCID-xpq8-npn5-kyb9
59
vulnerability VCID-yfkz-3xu3-vyc9
60
vulnerability VCID-yhzr-hb68-cfd6
61
vulnerability VCID-ykmg-jcfe-8qf4
62
vulnerability VCID-yuph-y2fa-3uaa
63
vulnerability VCID-zd73-fvwg-nbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0a1
1
url pkg:pypi/plone@4.3.12
purl pkg:pypi/plone@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ry7-xy6b-5fag
1
vulnerability VCID-69ps-uetw-y3gf
2
vulnerability VCID-8rp3-p3qe-x7ej
3
vulnerability VCID-8wkk-84ky-17ak
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-cpwq-sq8b-4yhf
9
vulnerability VCID-d42u-s7za-a3ad
10
vulnerability VCID-dg61-tw4u-dbcc
11
vulnerability VCID-edq7-7ncc-mbfx
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-pzke-4by2-w3hk
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
22
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.12
2
url pkg:pypi/plone@5.0.6
purl pkg:pypi/plone@5.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-5n6e-cha8-nyb8
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-6568-4ert-1bau
5
vulnerability VCID-69ps-uetw-y3gf
6
vulnerability VCID-8rp3-p3qe-x7ej
7
vulnerability VCID-8wkk-84ky-17ak
8
vulnerability VCID-951j-w95x-83g8
9
vulnerability VCID-9gu8-dgkr-sua3
10
vulnerability VCID-ax8a-2g7j-6ya2
11
vulnerability VCID-ay85-551m-vfej
12
vulnerability VCID-basq-jjsf-3fbd
13
vulnerability VCID-bmwk-nutp-r3fs
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-edq7-7ncc-mbfx
17
vulnerability VCID-eu4z-htaq-c3d6
18
vulnerability VCID-exan-4j3e-2qeh
19
vulnerability VCID-fdpc-runu-ekah
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-jvvz-bafs-t7gc
23
vulnerability VCID-mn7t-zgfw-tqfw
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-x2xm-hpc2-uubq
29
vulnerability VCID-yfkz-3xu3-vyc9
30
vulnerability VCID-z4jt-v88h-77er
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.6
3
url pkg:pypi/plone@5.0.7
purl pkg:pypi/plone@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-5ry7-xy6b-5fag
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8wkk-84ky-17ak
5
vulnerability VCID-951j-w95x-83g8
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-dg61-tw4u-dbcc
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-jvvz-bafs-t7gc
18
vulnerability VCID-p71t-er3d-9fdn
19
vulnerability VCID-pzke-4by2-w3hk
20
vulnerability VCID-q7nt-b3s9-9kf6
21
vulnerability VCID-r52t-hx1j-ufa1
22
vulnerability VCID-x2xm-hpc2-uubq
23
vulnerability VCID-z4jt-v88h-77er
24
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7
aliases CVE-2016-7139, GHSA-pp4c-2692-7f37, PYSEC-2017-62
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yfkz-3xu3-vyc9
68
url VCID-yhzr-hb68-cfd6
vulnerability_id VCID-yhzr-hb68-cfd6
summary Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
references
0
reference_url http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html
reference_id
reference_type
scores
url http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html
1
reference_url http://secunia.com/advisories/47406
reference_id
reference_type
scores
url http://secunia.com/advisories/47406
2
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/72018
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/72018
3
reference_url https://github.com/advisories/GHSA-pcwm-8jc3-qxvj
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-pcwm-8jc3-qxvj
4
reference_url https://github.com/plone/plone
reference_id
reference_type
scores
url https://github.com/plone/plone
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-22.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-22.yaml
6
reference_url http://www.kb.cert.org/vuls/id/903934
reference_id
reference_type
scores
url http://www.kb.cert.org/vuls/id/903934
7
reference_url http://www.nruns.com/_downloads/advisory28122011.pdf
reference_id
reference_type
scores
url http://www.nruns.com/_downloads/advisory28122011.pdf
8
reference_url http://www.ocert.org/advisories/ocert-2011-003.html
reference_id
reference_type
scores
url http://www.ocert.org/advisories/ocert-2011-003.html
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-4462
reference_id CVE-2011-4462
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2011-4462
fixed_packages
0
url pkg:pypi/plone@4.1.4
purl pkg:pypi/plone@4.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-zd73-fvwg-nbgx
53
vulnerability VCID-zwnj-revc-vbd6
54
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.4
aliases CVE-2011-4462, GHSA-pcwm-8jc3-qxvj, PYSEC-2011-22
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yhzr-hb68-cfd6
69
url VCID-ykmg-jcfe-8qf4
vulnerability_id VCID-ykmg-jcfe-8qf4
summary Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978450
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978450
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4189, PYSEC-2014-53
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ykmg-jcfe-8qf4
70
url VCID-yuph-y2fa-3uaa
vulnerability_id VCID-yuph-y2fa-3uaa
summary The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20130618
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20130618
1
reference_url http://plone.org/products/plone/security/advisories/20130618-announcement
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20130618-announcement
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=978470
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=978470
3
reference_url http://seclists.org/oss-sec/2013/q3/261
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2013/q3/261
4
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-58.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-58.yaml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4194
reference_id CVE-2013-4194
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2013-4194
7
reference_url https://github.com/advisories/GHSA-mm32-jw73-9227
reference_id GHSA-mm32-jw73-9227
reference_type
scores
url https://github.com/advisories/GHSA-mm32-jw73-9227
fixed_packages
0
url pkg:pypi/plone@4.1.1
purl pkg:pypi/plone@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-9kgy-2mwu-6yhd
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-chqa-wbu7-eyak
13
vulnerability VCID-cpwq-sq8b-4yhf
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-dxqw-uf6r-vbbh
17
vulnerability VCID-edq7-7ncc-mbfx
18
vulnerability VCID-eg2r-ez9f-hkak
19
vulnerability VCID-eu4z-htaq-c3d6
20
vulnerability VCID-exan-4j3e-2qeh
21
vulnerability VCID-fdpc-runu-ekah
22
vulnerability VCID-g2ap-vh6r-yqds
23
vulnerability VCID-g6ky-pfur-7kfg
24
vulnerability VCID-gdtw-2d1s-2bbw
25
vulnerability VCID-h4kd-eh8g-gude
26
vulnerability VCID-h8ur-tnzd-afay
27
vulnerability VCID-hb93-ea78-8ygv
28
vulnerability VCID-hhux-xufk-ube2
29
vulnerability VCID-khhr-m295-23gs
30
vulnerability VCID-khsn-43tn-37bx
31
vulnerability VCID-krfw-xa2b-vue5
32
vulnerability VCID-kz14-79we-xbfe
33
vulnerability VCID-mt5t-3gsw-7fde
34
vulnerability VCID-n4nh-4rq4-r7hx
35
vulnerability VCID-p71t-er3d-9fdn
36
vulnerability VCID-pb2y-jwn1-wbck
37
vulnerability VCID-pgrv-sncf-cqca
38
vulnerability VCID-pzke-4by2-w3hk
39
vulnerability VCID-q7nt-b3s9-9kf6
40
vulnerability VCID-r52t-hx1j-ufa1
41
vulnerability VCID-svbc-dj3m-t7av
42
vulnerability VCID-tc7w-wttv-vfed
43
vulnerability VCID-uykg-p1e9-mfd8
44
vulnerability VCID-vgga-a2ga-t3hw
45
vulnerability VCID-vr9k-9xch-4yc7
46
vulnerability VCID-w2mv-zekv-8fcv
47
vulnerability VCID-wuas-tkd4-rkd4
48
vulnerability VCID-x2xm-hpc2-uubq
49
vulnerability VCID-x6y6-xx1a-7kfd
50
vulnerability VCID-xpq8-npn5-kyb9
51
vulnerability VCID-yfkz-3xu3-vyc9
52
vulnerability VCID-yhzr-hb68-cfd6
53
vulnerability VCID-zd73-fvwg-nbgx
54
vulnerability VCID-zwnj-revc-vbd6
55
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.1.1
1
url pkg:pypi/plone@4.2.6
purl pkg:pypi/plone@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-h4kd-eh8g-gude
19
vulnerability VCID-hhux-xufk-ube2
20
vulnerability VCID-mn7t-zgfw-tqfw
21
vulnerability VCID-n4nh-4rq4-r7hx
22
vulnerability VCID-p71t-er3d-9fdn
23
vulnerability VCID-pzke-4by2-w3hk
24
vulnerability VCID-q7nt-b3s9-9kf6
25
vulnerability VCID-r52t-hx1j-ufa1
26
vulnerability VCID-vgga-a2ga-t3hw
27
vulnerability VCID-w2mv-zekv-8fcv
28
vulnerability VCID-wuas-tkd4-rkd4
29
vulnerability VCID-x2xm-hpc2-uubq
30
vulnerability VCID-yfkz-3xu3-vyc9
31
vulnerability VCID-zwnj-revc-vbd6
32
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.6
2
url pkg:pypi/plone@4.3.2
purl pkg:pypi/plone@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-ay85-551m-vfej
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-cpwq-sq8b-4yhf
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-h4kd-eh8g-gude
20
vulnerability VCID-hhux-xufk-ube2
21
vulnerability VCID-j8fv-uhxw-jkcw
22
vulnerability VCID-mn7t-zgfw-tqfw
23
vulnerability VCID-n4nh-4rq4-r7hx
24
vulnerability VCID-p71t-er3d-9fdn
25
vulnerability VCID-pzke-4by2-w3hk
26
vulnerability VCID-q7nt-b3s9-9kf6
27
vulnerability VCID-r52t-hx1j-ufa1
28
vulnerability VCID-vgga-a2ga-t3hw
29
vulnerability VCID-w2mv-zekv-8fcv
30
vulnerability VCID-wuas-tkd4-rkd4
31
vulnerability VCID-x2xm-hpc2-uubq
32
vulnerability VCID-yfkz-3xu3-vyc9
33
vulnerability VCID-z4jt-v88h-77er
34
vulnerability VCID-zwnj-revc-vbd6
35
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.2
aliases CVE-2013-4194, GHSA-mm32-jw73-9227, PYSEC-2014-58
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yuph-y2fa-3uaa
71
url VCID-z886-y25h-nua3
vulnerability_id VCID-z886-y25h-nua3
summary Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.
references
0
reference_url http://plone.org/products/plone-hotfix/releases/20110622
reference_id
reference_type
scores
url http://plone.org/products/plone-hotfix/releases/20110622
1
reference_url http://plone.org/products/plone/security/advisories/20110622
reference_id
reference_type
scores
url http://plone.org/products/plone/security/advisories/20110622
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=718824
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=718824
3
reference_url http://secunia.com/advisories/45056
reference_id
reference_type
scores
url http://secunia.com/advisories/45056
4
reference_url http://secunia.com/advisories/45111
reference_id
reference_type
scores
url http://secunia.com/advisories/45111
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-25.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-25.yaml
6
reference_url https://mail.zope.org/pipermail/zope-announce/2011-June/002260.html
reference_id
reference_type
scores
url https://mail.zope.org/pipermail/zope-announce/2011-June/002260.html
7
reference_url https://plone.org/products/plone-hotfix/releases/20110622
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20110622
8
reference_url https://plone.org/products/plone/security/advisories/20110622
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20110622
9
reference_url https://www.openwall.com/lists/oss-security/2011/07/04/6
reference_id
reference_type
scores
url https://www.openwall.com/lists/oss-security/2011/07/04/6
10
reference_url https://www.openwall.com/lists/oss-security/2011/07/12/9
reference_id
reference_type
scores
url https://www.openwall.com/lists/oss-security/2011/07/12/9
11
reference_url http://www.openwall.com/lists/oss-security/2011/07/04/6
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2011/07/04/6
12
reference_url http://www.openwall.com/lists/oss-security/2011/07/12/9
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2011/07/12/9
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-2528
reference_id CVE-2011-2528
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2011-2528
14
reference_url https://github.com/advisories/GHSA-p6h9-hpcg-c6gm
reference_id GHSA-p6h9-hpcg-c6gm
reference_type
scores
url https://github.com/advisories/GHSA-p6h9-hpcg-c6gm
fixed_packages
0
url pkg:pypi/plone@3.3.6
purl pkg:pypi/plone@3.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-9a27-8egg-7uam
10
vulnerability VCID-9dr2-mexa-qfbn
11
vulnerability VCID-9kgy-2mwu-6yhd
12
vulnerability VCID-9u27-bf7b-x7er
13
vulnerability VCID-ax8a-2g7j-6ya2
14
vulnerability VCID-ay85-551m-vfej
15
vulnerability VCID-basq-jjsf-3fbd
16
vulnerability VCID-chqa-wbu7-eyak
17
vulnerability VCID-cpwq-sq8b-4yhf
18
vulnerability VCID-d42u-s7za-a3ad
19
vulnerability VCID-dg61-tw4u-dbcc
20
vulnerability VCID-dxqw-uf6r-vbbh
21
vulnerability VCID-edq7-7ncc-mbfx
22
vulnerability VCID-eg2r-ez9f-hkak
23
vulnerability VCID-eu4z-htaq-c3d6
24
vulnerability VCID-exan-4j3e-2qeh
25
vulnerability VCID-fdpc-runu-ekah
26
vulnerability VCID-fqcf-4say-h7g8
27
vulnerability VCID-g2ap-vh6r-yqds
28
vulnerability VCID-g6ky-pfur-7kfg
29
vulnerability VCID-gdtw-2d1s-2bbw
30
vulnerability VCID-h4kd-eh8g-gude
31
vulnerability VCID-h8ur-tnzd-afay
32
vulnerability VCID-hb93-ea78-8ygv
33
vulnerability VCID-hhux-xufk-ube2
34
vulnerability VCID-hygx-6n52-u7fz
35
vulnerability VCID-jhw6-wxz2-qbgd
36
vulnerability VCID-jvwn-yw13-gfe9
37
vulnerability VCID-khhr-m295-23gs
38
vulnerability VCID-khsn-43tn-37bx
39
vulnerability VCID-krfw-xa2b-vue5
40
vulnerability VCID-kz14-79we-xbfe
41
vulnerability VCID-mt5t-3gsw-7fde
42
vulnerability VCID-n4nh-4rq4-r7hx
43
vulnerability VCID-nrxp-p6rx-8kdd
44
vulnerability VCID-p71t-er3d-9fdn
45
vulnerability VCID-pb2y-jwn1-wbck
46
vulnerability VCID-pgrv-sncf-cqca
47
vulnerability VCID-pzke-4by2-w3hk
48
vulnerability VCID-q7nt-b3s9-9kf6
49
vulnerability VCID-r52t-hx1j-ufa1
50
vulnerability VCID-s84e-bb7w-5qht
51
vulnerability VCID-shjb-m9k6-uuf1
52
vulnerability VCID-svbc-dj3m-t7av
53
vulnerability VCID-tc7w-wttv-vfed
54
vulnerability VCID-ud5f-7gx8-83d6
55
vulnerability VCID-uqe7-n3uh-zfac
56
vulnerability VCID-uykg-p1e9-mfd8
57
vulnerability VCID-vgga-a2ga-t3hw
58
vulnerability VCID-vr9k-9xch-4yc7
59
vulnerability VCID-w2mv-zekv-8fcv
60
vulnerability VCID-wuas-tkd4-rkd4
61
vulnerability VCID-x2xm-hpc2-uubq
62
vulnerability VCID-x6y6-xx1a-7kfd
63
vulnerability VCID-x8n5-qj35-eqb1
64
vulnerability VCID-xpq8-npn5-kyb9
65
vulnerability VCID-yfkz-3xu3-vyc9
66
vulnerability VCID-yhzr-hb68-cfd6
67
vulnerability VCID-ykmg-jcfe-8qf4
68
vulnerability VCID-yuph-y2fa-3uaa
69
vulnerability VCID-zd73-fvwg-nbgx
70
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.6
aliases CVE-2011-2528, GHSA-p6h9-hpcg-c6gm, PYSEC-2011-25, PYSEC-2011-32
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z886-y25h-nua3
72
url VCID-zd73-fvwg-nbgx
vulnerability_id VCID-zd73-fvwg-nbgx
summary The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.
references
0
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
1
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
2
reference_url https://plone.org/products/plone/security/advisories/20121106/03
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/03
3
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
fixed_packages
0
url pkg:pypi/plone@4.2.3
purl pkg:pypi/plone@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-3shf-hh9a-rqdw
2
vulnerability VCID-4v5e-r5we-tffe
3
vulnerability VCID-5n6e-cha8-nyb8
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-ay85-551m-vfej
14
vulnerability VCID-basq-jjsf-3fbd
15
vulnerability VCID-bmwk-nutp-r3fs
16
vulnerability VCID-cpwq-sq8b-4yhf
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-h4kd-eh8g-gude
24
vulnerability VCID-hhux-xufk-ube2
25
vulnerability VCID-hygx-6n52-u7fz
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-n4nh-4rq4-r7hx
28
vulnerability VCID-nrxp-p6rx-8kdd
29
vulnerability VCID-p71t-er3d-9fdn
30
vulnerability VCID-pzke-4by2-w3hk
31
vulnerability VCID-q7nt-b3s9-9kf6
32
vulnerability VCID-r52t-hx1j-ufa1
33
vulnerability VCID-s84e-bb7w-5qht
34
vulnerability VCID-shjb-m9k6-uuf1
35
vulnerability VCID-ud5f-7gx8-83d6
36
vulnerability VCID-vgga-a2ga-t3hw
37
vulnerability VCID-w2mv-zekv-8fcv
38
vulnerability VCID-wuas-tkd4-rkd4
39
vulnerability VCID-x2xm-hpc2-uubq
40
vulnerability VCID-x8n5-qj35-eqb1
41
vulnerability VCID-yfkz-3xu3-vyc9
42
vulnerability VCID-ykmg-jcfe-8qf4
43
vulnerability VCID-yuph-y2fa-3uaa
44
vulnerability VCID-zwnj-revc-vbd6
45
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.2.3
1
url pkg:pypi/plone@4.3b1
purl pkg:pypi/plone@4.3b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-5n6e-cha8-nyb8
2
vulnerability VCID-5ry7-xy6b-5fag
3
vulnerability VCID-6568-4ert-1bau
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-ay85-551m-vfej
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-cpwq-sq8b-4yhf
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-dg61-tw4u-dbcc
14
vulnerability VCID-edq7-7ncc-mbfx
15
vulnerability VCID-eu4z-htaq-c3d6
16
vulnerability VCID-exan-4j3e-2qeh
17
vulnerability VCID-fdpc-runu-ekah
18
vulnerability VCID-hhux-xufk-ube2
19
vulnerability VCID-mn7t-zgfw-tqfw
20
vulnerability VCID-n4nh-4rq4-r7hx
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-w2mv-zekv-8fcv
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-yfkz-3xu3-vyc9
28
vulnerability VCID-zwnj-revc-vbd6
29
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3b1
aliases CVE-2012-5487, PYSEC-2014-29
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zd73-fvwg-nbgx
73
url VCID-zy2g-gzmk-1qcz
vulnerability_id VCID-zy2g-gzmk-1qcz
summary Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
references
0
reference_url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
reference_id
reference_type
scores
url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
1
reference_url http://seclists.org/fulldisclosure/2016/Oct/80
reference_id
reference_type
scores
url http://seclists.org/fulldisclosure/2016/Oct/80
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-63.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-63.yaml
4
reference_url https://plone.org/security/hotfix/20160830/non-persistent-xss-in-zope2
reference_id
reference_type
scores
url https://plone.org/security/hotfix/20160830/non-persistent-xss-in-zope2
5
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/4
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/09/05/4
6
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/5
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/09/05/5
7
reference_url http://www.securityfocus.com/archive/1/539572/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/539572/100/0/threaded
8
reference_url http://www.securityfocus.com/bid/92752
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/92752
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-7140
reference_id CVE-2016-7140
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2016-7140
10
reference_url https://github.com/advisories/GHSA-chvw-gjxf-f8mc
reference_id GHSA-chvw-gjxf-f8mc
reference_type
scores
url https://github.com/advisories/GHSA-chvw-gjxf-f8mc
fixed_packages
0
url pkg:pypi/plone@4.0a1
purl pkg:pypi/plone@4.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2sk4-yc6h-17c4
1
vulnerability VCID-3buw-zes9-ukg4
2
vulnerability VCID-3shf-hh9a-rqdw
3
vulnerability VCID-4v5e-r5we-tffe
4
vulnerability VCID-5ry7-xy6b-5fag
5
vulnerability VCID-6568-4ert-1bau
6
vulnerability VCID-69ps-uetw-y3gf
7
vulnerability VCID-8rp3-p3qe-x7ej
8
vulnerability VCID-9a27-8egg-7uam
9
vulnerability VCID-9dr2-mexa-qfbn
10
vulnerability VCID-9kgy-2mwu-6yhd
11
vulnerability VCID-9u27-bf7b-x7er
12
vulnerability VCID-ax8a-2g7j-6ya2
13
vulnerability VCID-basq-jjsf-3fbd
14
vulnerability VCID-chqa-wbu7-eyak
15
vulnerability VCID-cpwq-sq8b-4yhf
16
vulnerability VCID-d42u-s7za-a3ad
17
vulnerability VCID-dg61-tw4u-dbcc
18
vulnerability VCID-dxqw-uf6r-vbbh
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eg2r-ez9f-hkak
21
vulnerability VCID-eu4z-htaq-c3d6
22
vulnerability VCID-exan-4j3e-2qeh
23
vulnerability VCID-fdpc-runu-ekah
24
vulnerability VCID-g2ap-vh6r-yqds
25
vulnerability VCID-g6ky-pfur-7kfg
26
vulnerability VCID-gdtw-2d1s-2bbw
27
vulnerability VCID-h8ur-tnzd-afay
28
vulnerability VCID-hb93-ea78-8ygv
29
vulnerability VCID-hhux-xufk-ube2
30
vulnerability VCID-hygx-6n52-u7fz
31
vulnerability VCID-jhw6-wxz2-qbgd
32
vulnerability VCID-jvwn-yw13-gfe9
33
vulnerability VCID-khhr-m295-23gs
34
vulnerability VCID-khsn-43tn-37bx
35
vulnerability VCID-krfw-xa2b-vue5
36
vulnerability VCID-kz14-79we-xbfe
37
vulnerability VCID-mt5t-3gsw-7fde
38
vulnerability VCID-n4nh-4rq4-r7hx
39
vulnerability VCID-nrxp-p6rx-8kdd
40
vulnerability VCID-p71t-er3d-9fdn
41
vulnerability VCID-pb2y-jwn1-wbck
42
vulnerability VCID-pgrv-sncf-cqca
43
vulnerability VCID-pzke-4by2-w3hk
44
vulnerability VCID-q7nt-b3s9-9kf6
45
vulnerability VCID-r52t-hx1j-ufa1
46
vulnerability VCID-s84e-bb7w-5qht
47
vulnerability VCID-shjb-m9k6-uuf1
48
vulnerability VCID-svbc-dj3m-t7av
49
vulnerability VCID-tc7w-wttv-vfed
50
vulnerability VCID-ud5f-7gx8-83d6
51
vulnerability VCID-uqe7-n3uh-zfac
52
vulnerability VCID-uykg-p1e9-mfd8
53
vulnerability VCID-vr9k-9xch-4yc7
54
vulnerability VCID-w2mv-zekv-8fcv
55
vulnerability VCID-x2xm-hpc2-uubq
56
vulnerability VCID-x6y6-xx1a-7kfd
57
vulnerability VCID-x8n5-qj35-eqb1
58
vulnerability VCID-xpq8-npn5-kyb9
59
vulnerability VCID-yfkz-3xu3-vyc9
60
vulnerability VCID-yhzr-hb68-cfd6
61
vulnerability VCID-ykmg-jcfe-8qf4
62
vulnerability VCID-yuph-y2fa-3uaa
63
vulnerability VCID-zd73-fvwg-nbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.0a1
1
url pkg:pypi/plone@4.3.12
purl pkg:pypi/plone@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ry7-xy6b-5fag
1
vulnerability VCID-69ps-uetw-y3gf
2
vulnerability VCID-8rp3-p3qe-x7ej
3
vulnerability VCID-8wkk-84ky-17ak
4
vulnerability VCID-9gu8-dgkr-sua3
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-bmwk-nutp-r3fs
8
vulnerability VCID-cpwq-sq8b-4yhf
9
vulnerability VCID-d42u-s7za-a3ad
10
vulnerability VCID-dg61-tw4u-dbcc
11
vulnerability VCID-edq7-7ncc-mbfx
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-pzke-4by2-w3hk
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
22
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@4.3.12
2
url pkg:pypi/plone@5.0.7
purl pkg:pypi/plone@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29gf-82fr-k3h8
1
vulnerability VCID-5ry7-xy6b-5fag
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8wkk-84ky-17ak
5
vulnerability VCID-951j-w95x-83g8
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-dg61-tw4u-dbcc
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-jvvz-bafs-t7gc
18
vulnerability VCID-p71t-er3d-9fdn
19
vulnerability VCID-pzke-4by2-w3hk
20
vulnerability VCID-q7nt-b3s9-9kf6
21
vulnerability VCID-r52t-hx1j-ufa1
22
vulnerability VCID-x2xm-hpc2-uubq
23
vulnerability VCID-z4jt-v88h-77er
24
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7
aliases CVE-2016-7140, GHSA-chvw-gjxf-f8mc, PYSEC-2017-63
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zy2g-gzmk-1qcz
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.3.4