Search for packages
| purl | pkg:pypi/products.cmfplone@5.0.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GMS-2016-28
|
Privilege escalation in webdav A missing webdav security declaration would allow unauthorized webdav access. | There are no reported fixed by versions. |
|
GMS-2016-27
|
Unauthorized disclosure of site content A vulnerability that allows attackers to gain information about private site content. | There are no reported fixed by versions. |
|
GMS-2016-26
|
Bypass Restricted Python A user who can create or edit templates can bypass Restricted Python. | There are no reported fixed by versions. |
|
GHSA-8g72-gq68-6gqh
Aliases: CVE-2017-1000481 |
Products.CMFPlone Open Redirect Vulnerability When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the … |
Vulnerable Vulnerable |
|
GHSA-859j-668v-mrr6
Aliases: CVE-2017-1000482 |
Products.CMFPlone XSS in profile home_page property A member of the Plone site could set javascript in the `home_page` property of … |
Vulnerable Vulnerable |