Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/products.cmfplone@3.3
purl pkg:pypi/products.cmfplone@3.3
Tags Ghost
Next non-vulnerable version 5.1.0
Latest non-vulnerable version 5.1.0
Risk score 3.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-4vr8-r7qr-fpvq
Aliases:
CVE-2013-7061
Plone Privilege escalation through exposed underlying API `Products/CMFPlone/CatalogTool.py` in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and …
4.3.3
Vulnerable
GHSA-rg52-j87w-pf83
Aliases:
CVE-2013-7060
Plone Filesystem path information leak Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via …
4.3.3
Vulnerable
4.3.3
Vulnerable
This package is not known to fix any advisories.