Search for packages
| purl | pkg:pypi/plone@4.3a0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-5whw-5cmm-9jw4
Aliases: CVE-2012-5504 |
Plone Cross-site scripting Vulnerability Cross-site scripting (XSS) vulnerability in widget_traversal.py in Plone before 4.2.3 and 4.3 before beta 1 allows … |
Vulnerable |
|
GHSA-25jh-5h5r-h33m
Aliases: CVE-2012-5493 |
Plone Sandbox Bypass `gtbn.py` in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions … |
Vulnerable |
|
GHSA-q46g-v7r4-9vhr
Aliases: CVE-2012-5490 |
Plone Cross-site scripting Vulnerability Cross-site scripting (XSS) vulnerability in `kssdevel.py` in Plone before 4.2.3 and 4.3 before beta 1 allows … |
Vulnerable |
|
GHSA-cxw7-85xm-3xrc
Aliases: CVE-2012-5488 |
Plone Code Injection vulnerability python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python … |
Vulnerable |
|
GHSA-pvhv-qwc8-r2pg
Aliases: CVE-2012-5501 |
Plone Arbitrary File Read `at_download.py` in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary … |
Vulnerable |
|
GHSA-9m4g-f42q-vrrh
Aliases: CVE-2012-5487 |
Plone Sandbox Bypass The sandbox whitelisting function (`allowmodule.py`) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated … |
Vulnerable |
|
GHSA-f8pg-wp5j-rjxx
Aliases: CVE-2012-5491 |
Plone Information Disclosure `z3c.form`, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain … |
Vulnerable |
|
GHSA-wprr-mc54-c62q
Aliases: CVE-2012-5508 |
Exposure of Sensitive Information in Plone The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote … |
Vulnerable |
|
GHSA-hr59-35cr-qf43
Aliases: CVE-2012-5502 |
Plone Cross-site scripting Vulnerability Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows … |
Vulnerable |
|
GHSA-97rj-p794-wq6m
Aliases: CVE-2012-5498 |
Plone denial of service via Caching Bypass queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers … |
Vulnerable |
|
GHSA-6w93-4c4p-xv2x
Aliases: CVE-2012-5492 |
Plone Metadata Disclosure `uid_catalog.py` in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about … |
Vulnerable |
|
GHSA-3g6w-4m7x-97v6
Aliases: CVE-2012-5494 |
Plone Cross-site scripting Vulnerability Cross-site scripting (XSS) vulnerability in python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows … |
Vulnerable |
|
GHSA-cq5g-924m-7fxh
Aliases: CVE-2012-5505 |
Plone Information Disclosure `atat.py` in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data … |
Vulnerable |