| Plone Unauthenticated Write VulnerabilityCVE-2020-7941 · GHSA-W6G9-XCCC-347HVersion ranges need review. |
plone-app-contenttypesplone |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Cross-Frame Scripting vulnerability has been found on Plone CMSCVE-2024-0669 · GHSA-5XFX-55X4-J223Version ranges need review. |
plone |
PyPI |
High
|
Fix reported |
|
| Plone Privilege EscallationCVE-2020-7938 · GHSA-CJG3-Q24H-9QWFVersion ranges need review. |
plone-restapiplone |
PyPIRed Hat |
High
|
Fix reported |
|
| Improper Restriction of XML External Entity Reference in PloneCVE-2020-28736 · GHSA-2C8C-84W2-J38JVersion ranges need review. |
plone-app-dexterityplone-app-event |
PyPI |
High
|
Fix reported |
|
| SSRF attacks via tracebacks in PloneCVE-2020-28735 · GHSA-X7WF-5MJC-6X76Version ranges need review. |
plone-app-dexterityplone-app-event |
PyPI |
High
|
Fix reported |
|
| Improper Restriction of XML External Entity Reference in PloneCVE-2020-28734 · GHSA-WQ6X-G685-W5F2Version ranges need review. |
plone-app-dexterityplone-app-event |
PyPI |
High
|
Fix reported |
|
| Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accountsCVE-2011-1950 · GHSA-2QX8-589J-GCPXVersion ranges need review. |
plone-app-usersplone |
PyPI |
High
|
Fix reported |
|
| Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, PloneCVE-2021-33507 · GHSA-35RG-466W-77H3Version ranges need review. |
ploneproducts-cmfcore |
PyPI |
Medium
|
Fix reported |
|
| Plone unauthorized member addition vulnerabilityCVE-2015-7315 · GHSA-984M-RJ28-8C6XVersion ranges need review. |
ploneproducts-cmfplone |
PyPIRed Hat |
High
|
Fix reported |
|
| Cross-site scripting in Products.CMFPlone and Products.PasswordResetToolCVE-2011-1948 · GHSA-P7H9-VF92-5FJ5Version ranges need review. |
ploneproducts-cmfplone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Products.CMFPlone Open Redirect VulnerabilityCVE-2017-1000481 · GHSA-8G72-GQ68-6GQHVersion ranges need review. |
ploneproducts-cmfplone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Products.CMFPlone XSS in profile home_page propertyCVE-2017-1000482 · GHSA-859J-668V-MRR6Version ranges need review. |
ploneproducts-cmfplone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Plone allows anonymous users to reset any users password through the web via Password Reset ToolCVE-2006-4247 · GHSA-5HCH-V5PQ-X4QPVersion ranges need review. |
plone |
PyPI |
High
|
Fix reported |
|
| Plone allows a user to masquerade as a groupCVE-2006-4249 · GHSA-R7J4-82XW-8M9PVersion ranges need review. |
plone |
PyPI |
Medium
|
Fix reported |
|
| Plone Cross-site request forgery (CSRF)CVE-2008-0164 · GHSA-4J3W-G62X-HRCPVersion ranges need review. |
plone |
PyPI |
High
|
Fix reported |
|
| High severity vulnerability that affects Plone and Zope2CVE-2011-2528 · GHSA-P6H9-HPCG-C6GMVersion ranges need review. |
plonezope2 |
PyPI |
High
|
Fix reported |
|
| Phone information disclosure vulnerabilityCVE-2024-22889 · GHSA-XG5P-8WG5-RHXMVersion ranges need review. |
plone |
PyPI |
Medium
|
No fix reported |
|
| Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishableCVE-2011-4030 · GHSA-PWGM-JVQV-6V8PVersion ranges need review. |
plone |
PyPI |
High
|
Fix reported |
|
| Plone XSS VulnerabilityCVE-2011-1340 · GHSA-CVWC-G7FW-7XRJVersion ranges need review. |
plone |
PyPI |
Medium
|
Fix reported |
|
| Plone Improper Session ManagementCVE-2008-1393 · GHSA-593C-J348-F3GVVersion ranges need review. |
plone |
PyPI |
High
|
Fix reported |
|
