Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-jvvz-bafs-t7gc
Vulnerability ID VCID-jvvz-bafs-t7gc
Aliases CVE-2016-4043
PYSEC-2017-57
Summary Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
There are no known severity scores.
Reference id Reference type URL
https://plone.org/security/hotfix/20160419/bypass-restricted-python
http://www.openwall.com/lists/oss-security/2016/04/20/3
No exploits are available.
There are no known vectors.

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-06-02T04:04:30.668401+00:00 Pypa Importer Import https://github.com/pypa/advisory-database/blob/main/vulns/plone/PYSEC-2017-57.yaml 38.6.0