Search for packages
| purl | pkg:pypi/products.cmfplone@4.1.6 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GMS-2016-28
|
Privilege escalation in webdav A missing webdav security declaration would allow unauthorized webdav access. | There are no reported fixed by versions. |
|
GMS-2016-27
|
Unauthorized disclosure of site content A vulnerability that allows attackers to gain information about private site content. | There are no reported fixed by versions. |
|
GMS-2015-35
|
Multiple CSRF vulnerabilities in Management Interface There are multiple CSRF (cross-site request forgery) vulnerabilities in the ZMI (Zope Management Interface). | There are no reported fixed by versions. |
|
GHSA-8w54-22w9-3g8f
Aliases: GMS-2022-46 |
Cross-site Scripting and Open Redirect in Products.CMFPlone ### Impact Plone is vulnerable to reflected cross site scripting and open redirect … | There are no reported fixed by versions. |
|
GHSA-4vr8-r7qr-fpvq
Aliases: CVE-2013-7061 |
Plone Privilege escalation through exposed underlying API `Products/CMFPlone/CatalogTool.py` in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and … |
Vulnerable |
|
CVE-2015-7316
|
Non-Persistent XSS Plone's URL checking infrastructure includes a method for checking if URLs valid and located in the Plone site. … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-8g72-gq68-6gqh
Aliases: CVE-2017-1000481 |
Products.CMFPlone Open Redirect Vulnerability When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the … |
Vulnerable Vulnerable |
|
GHSA-859j-668v-mrr6
Aliases: CVE-2017-1000482 |
Products.CMFPlone XSS in profile home_page property A member of the Plone site could set javascript in the `home_page` property of … |
Vulnerable Vulnerable |
|
GHSA-rg52-j87w-pf83
Aliases: CVE-2013-7060 |
Plone Filesystem path information leak Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via … |
Vulnerable Vulnerable |
|
GHSA-984m-rj28-8c6x
Aliases: CVE-2015-7315 |
Plone unauthorized member addition vulnerability Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through … |
Vulnerable Vulnerable |