Search for packages
| purl | pkg:pypi/plone@2.5 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-3v28-9jjp-4g5w
Aliases: CVE-2011-0720 |
Plone Privilege Escalation Vulnerability Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, … |
Vulnerable |
|
PYSEC-2006-6
Aliases: CVE-2006-4249 GHSA-r7j4-82xw-8m9p |
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade … | There are no reported fixed by versions. |
|
PYSEC-2007-4
Aliases: CVE-2007-5741 GHSA-hf26-vvmx-x8c8 |
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing … | There are no reported fixed by versions. |
|
PYSEC-2006-5
Aliases: CVE-2006-4247 GHSA-5hch-v5pq-x4qp |
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset … | There are no reported fixed by versions. |
|
GHSA-xvwv-6wvx-px9x
Aliases: CVE-2017-1000484 |
Plone Open Redirect By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you … |
Vulnerable Vulnerable |
|
GHSA-8g72-gq68-6gqh
Aliases: CVE-2017-1000481 |
Products.CMFPlone Open Redirect Vulnerability When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the … |
Vulnerable Vulnerable |
|
GHSA-qc57-h2f7-p4hx
Aliases: CVE-2017-1000483 |
Plone Unauthorized Access Vulnerability Accessing private content via `str.format` in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an … |
Vulnerable Vulnerable |
|
GHSA-r7j4-82xw-8m9p
Aliases: CVE-2006-4249 |
Plone allows a user to masquerade as a group Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous … | There are no reported fixed by versions. |
|
GHSA-hf26-vvmx-x8c8
Aliases: CVE-2007-5741 |
Plone Arbitrary Code Execution via Unsafe Handling of Pickles Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers … | There are no reported fixed by versions. |