Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/products.cmfplone@5.0rc2
purl pkg:pypi/products.cmfplone@5.0rc2
Next non-vulnerable version 5.1.0
Latest non-vulnerable version 5.1.0
Risk score 1.9
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GMS-2016-28

Privilege escalation in webdav A missing webdav security declaration would allow unauthorized webdav access. There are no reported fixed by versions.
GMS-2016-27

Unauthorized disclosure of site content A vulnerability that allows attackers to gain information about private site content. There are no reported fixed by versions.
GMS-2016-26

Bypass Restricted Python A user who can create or edit templates can bypass Restricted Python. There are no reported fixed by versions.
GHSA-8w54-22w9-3g8f
Aliases:
GMS-2022-46
Cross-site Scripting and Open Redirect in Products.CMFPlone ### Impact Plone is vulnerable to reflected cross site scripting and open redirect … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2015-7316
Non-Persistent XSS Plone's URL checking infrastructure includes a method for checking if URLs valid and located in the Plone site. …
GHSA-984m-rj28-8c6x
Plone unauthorized member addition vulnerability Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through … CVE-2015-7315