Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/products.cmfplone@5.0.10
purl pkg:pypi/products.cmfplone@5.0.10
Next non-vulnerable version 5.1.0
Latest non-vulnerable version 5.1.0
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GMS-2016-28

Privilege escalation in webdav A missing webdav security declaration would allow unauthorized webdav access. There are no reported fixed by versions.
GMS-2016-27

Unauthorized disclosure of site content A vulnerability that allows attackers to gain information about private site content. There are no reported fixed by versions.
GMS-2016-26

Bypass Restricted Python A user who can create or edit templates can bypass Restricted Python. There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-8g72-gq68-6gqh
Products.CMFPlone Open Redirect Vulnerability When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the … CVE-2017-1000481
GHSA-859j-668v-mrr6
Products.CMFPlone XSS in profile home_page property A member of the Plone site could set javascript in the `home_page` property of … CVE-2017-1000482