Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/plone.app.contenttypes@1.2.20
purl pkg:pypi/plone.app.contenttypes@1.2.20
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-f7qw-5fgj-247x
Aliases:
GMS-2022-16
Cross-site Scripting and Open Redirect in plone.app.contenttypes ### Impact Plone is vulnerable to reflected cross site scripting and open redirect …
2.2.3
Vulnerable
CVE-2020-7941
Aliases:
GHSA-w6g9-xccc-347h
Plone Unauthenticated Write Vulnerability A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) … There are no reported fixed by versions.
GHSA-8pcw-h6w9-h46g

plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length ### Impact When creating an Image …
3.0.12
Vulnerable
This package is not known to fix any advisories.