Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2011-4030

plone: Sub-objects access via unspecified vectors

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

CVSS 2.0 · 9.3 Critical EPSS 2.0% KEV · Not listed
Vendors
Plone
Products
Cmfeditions Plone