Search for packages
| purl | pkg:pypi/plone@2.1 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-56p3-rrp4-2j82
Aliases: CVE-2013-4200 |
Plone Open Redirection vulnerability via next parameter The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through … |
Vulnerable |
|
GHSA-qjxf-6pr8-j87v
Aliases: CVE-2013-4198 |
Plone's authenticated users able to alter their password despite of policy definition `mail_password.py` in Plone 2.1 through 4.1, 4.2.x through … | There are no reported fixed by versions. |
|
GHSA-pwpq-632g-h49g
Aliases: CVE-2013-4189 |
Plone Privilege escalation due improper authorization Multiple unspecified vulnerabilities in (1) `dataitems.py`, (2) `get.py`, and (3) `traverseName.py` in Plone 2.1 … | There are no reported fixed by versions. |
|
GHSA-mm32-jw73-9227
Aliases: CVE-2013-4194 |
Plone is vulnerable to File System Path Exposure The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, … |
Vulnerable |
|
GHSA-xfjq-9rxq-ph6m
Aliases: CVE-2013-4199 |
Plone Denial of Service vulnerability via decompressing large zip archives (1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, … |
Vulnerable |
|
GHSA-jjvw-3h9j-p7jf
Aliases: CVE-2013-4197 |
Plone Improper Access Control Vulnerability member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote … |
Vulnerable |
|
GHSA-f5h9-3hpf-9j8m
Aliases: CVE-2013-4192 |
Plone is vulnerable to email spoofing sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows … |
Vulnerable |
|
GHSA-89rq-27xp-vgv7
Aliases: CVE-2013-4190 |
Plone vulnerable to cross-site scripting Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone … |
Vulnerable |
|
GHSA-6fgf-x7wg-hp8r
Aliases: CVE-2013-4193 |
Plone Unrestricted Filed Manipulation vulnerability via content edit forms typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x … |
Vulnerable |
|
GHSA-qphh-5fv5-2mjj
Aliases: CVE-2013-4196 |
Plone is vulnerable to information exposure via the object manager implementation The object manager implementation (objectmanager.py) in Plone 2.1 through … |
Vulnerable |
|
GHSA-grwx-4p5v-9g2g
Aliases: CVE-2013-4191 |
Plone is vulnerable to Information Exposure when generating zip archives zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and … |
Vulnerable |
|
GHSA-qj7x-wm9q-qjx8
Aliases: CVE-2010-2422 |
Plone Cross-site Scripting vulnerability in PortalTransforms Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.5 before hotfix 20100612 … |
Vulnerable |
|
GHSA-j67j-8hrp-76xm
Aliases: CVE-2013-4195 |
Plone Multiple open redirect vulnerabilities Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 … |
Vulnerable |
|
GHSA-w3pw-qxjj-6prr
Aliases: CVE-2013-4188 |
Plone Authenticated Denial of Service vulnerability traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows … |
Vulnerable |