plone (PyPI)
Advisories
300
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 6.0.7 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "plone>=6.0.7"poetry
poetry add "plone>=6.0.7"uv
uv add "plone>=6.0.7"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-xg5p-8wg5-rhxm Phone information disclosure vulnerability |
High EPSS 0.70% |
<= 6.0.9 | No fix yet |
| GHSA-xg5p-8wg5-rhxm Phone information disclosure vulnerability |
High EPSS 0.70% |
<= 6.0.9 | No fix yet |
| GHSA-5xfx-55x4-j223 Cross-Frame Scripting vulnerability has been found on Plone CMS |
High EPSS 0.29% |
< 6.0.7 | 6.0.7 |
| GHSA-5xfx-55x4-j223 Cross-Frame Scripting vulnerability has been found on Plone CMS |
High EPSS 0.29% |
< 6.0.7 | 6.0.7 |
| GHSA-47p5-p3jw-w78w Server-Side Request Forgery in Plone CMS |
High EPSS 1.01% |
>= 4.3, < 5.2.5 | 5.2.5 |
| GHSA-47p5-p3jw-w78w Server-Side Request Forgery in Plone CMS |
High EPSS 1.01% |
>= 4.3, < 5.2.5 | 5.2.5 |
| GHSA-cvwc-g7fw-7xrj Plone XSS Vulnerability |
Medium EPSS 1.15% |
< 2.5.3 | 2.5.3 |
| GHSA-cvwc-g7fw-7xrj Plone XSS Vulnerability |
Medium EPSS 1.15% |
< 2.5.3 | 2.5.3 |
| GHSA-pwgm-jvqv-6v8p Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable |
High EPSS 1.99% |
>= 4.1, < 4.1.1 | 4.1.1 |
| GHSA-pwgm-jvqv-6v8p Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable |
High EPSS 1.99% |
>= 4.2a1, < 4.2a3 | 4.2a3 |
| GHSA-pwgm-jvqv-6v8p Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable |
High EPSS 1.99% |
>= 4.0, < 4.0.10>= 4.1, < 4.1.1>= 4.2a1, < 4.2a3 | 4.0.104.1.14.2a3 |
| GHSA-pwgm-jvqv-6v8p Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable |
High EPSS 1.99% |
>= 4.0, < 4.0.10 | 4.0.10 |
| GHSA-46f9-f8jm-mw2x Plone Cross-site Scripting vulnerability in the LiveSearch module |
Medium EPSS 1.15% |
< 3.0.4 | 3.0.4 |
| GHSA-46f9-f8jm-mw2x Plone Cross-site Scripting vulnerability in the LiveSearch module |
Medium EPSS 1.15% |
< 3.0.4 | 3.0.4 |
| GHSA-hjp5-hv33-q58g Plone credentials stored in session cookie |
Medium EPSS 1.14% |
<= 3.1.7 | No fix yet |
| GHSA-hjp5-hv33-q58g Plone credentials stored in session cookie |
Medium EPSS 1.14% |
<= 3.1.7 | No fix yet |
| GHSA-593c-j348-f3gv Plone Improper Session Management |
High EPSS 2.90% |
< 3.0 | 3.0 |
| GHSA-593c-j348-f3gv Plone Improper Session Management |
High EPSS 2.90% |
< 3.0 | 3.0 |
| GHSA-mq3q-jjph-rp5p Plone CMS Improper Session Management |
High EPSS 1.44% |
< 3.0 | 3.0 |
| GHSA-mq3q-jjph-rp5p Plone CMS Improper Session Management |
High EPSS 1.44% |
< 3.0 | 3.0 |
| GHSA-jcwh-rj6j-vm75 Plone allows remote users to modify arbitrary portraits |
Medium EPSS 4.02% |
No fix yet | |
| GHSA-jcwh-rj6j-vm75 Plone allows remote users to modify arbitrary portraits |
Medium EPSS 4.02% |
>= 2.1.0, <= 2.1.2 | No fix yet |
| GHSA-jcwh-rj6j-vm75 Plone allows remote users to modify arbitrary portraits |
Medium EPSS 4.02% |
< 2.0.6 | 2.0.6 |
| GHSA-jcwh-rj6j-vm75 Plone allows remote users to modify arbitrary portraits |
Medium EPSS 4.02% |
< 2.0.6>= 2.1.0 | 2.0.6 |
| GHSA-qfhw-fv3g-v836 Plone has stored XSS in folder contents |
Medium EPSS 0.54% |
>= 5.0, <= 5.2.4 | No fix yet |
| GHSA-qfhw-fv3g-v836 Plone has stored XSS in folder contents |
Medium EPSS 0.54% |
>= 5.0, < 5.2.5 | 5.2.5 |
| GHSA-rmpv-rcp6-v8wc Cross-site scripting in Plone |
Medium EPSS 0.63% |
<= 5.2.4 | No fix yet |
| GHSA-4mg4-wvmx-5332 Server-Side Request Forgery in Plone |
Medium EPSS 0.96% |
<= 5.2.4 | No fix yet |
| GHSA-4mg4-wvmx-5332 Server-Side Request Forgery in Plone |
Medium EPSS 0.96% |
< 5.2.5 | 5.2.5 |
| GHSA-35rg-466w-77h3 Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone |
Medium EPSS 0.75% |
<= 5.2.4 | No fix yet |
| GHSA-35rg-466w-77h3 Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone |
Medium EPSS 0.75% |
< 5.2.5 | 5.2.5 |
| GHSA-rmpv-rcp6-v8wc Cross-site scripting in Plone |
Medium EPSS 0.63% |
< 5.2.5 | 5.2.5 |
| GHSA-hm2h-f456-6j88 Cross-site scripting in Plone |
Medium EPSS 0.67% |
< 5.2.5 | 5.2.5 |
| GHSA-hm2h-f456-6j88 Cross-site scripting in Plone |
Medium EPSS 0.67% |
<= 5.2.4 | No fix yet |
| GHSA-hm2p-fhwx-9285 Incorrect Permission Assignment for Critical Resource in Plone |
Critical EPSS 1.98% |
< 5.2.5 | 5.2.5 |
| GHSA-hm2p-fhwx-9285 Incorrect Permission Assignment for Critical Resource in Plone |
Critical EPSS 1.98% |
< 5.2.5 | 5.2.5 |
| GHSA-gc9g-67cq-p7v4 Server-Side Request Forgery in Plone |
High EPSS 1.16% |
< 5.2.5 | 5.2.5 |
| GHSA-gc9g-67cq-p7v4 Server-Side Request Forgery in Plone |
High EPSS 1.16% |
<= 5.2.4 | No fix yet |
| GHSA-fj67-w3m4-rfmp Cross-site scripting in Plone |
Medium EPSS 0.67% |
< 5.2.5 | 5.2.5 |
| GHSA-fj67-w3m4-rfmp Cross-site scripting in Plone |
Medium EPSS 0.67% |
<= 5.2.4 | No fix yet |
| GHSA-hprr-4vfq-fcxw Plone XSS in User Fullname Property and File Upload |
Medium EPSS 0.98% |
< 5.2.4 | 5.2.4 |
| GHSA-hprr-4vfq-fcxw Plone XSS in User Fullname Property and File Upload |
Medium EPSS 0.98% |
< 5.2.4 | 5.2.4 |
| GHSA-38g6-x6jv-jwff Plone XSS Vulnerability |
Medium EPSS 0.76% |
<= 5.2.3 | No fix yet |
| GHSA-38g6-x6jv-jwff Plone XSS Vulnerability |
Medium EPSS 0.76% |
<= 5.2.3 | No fix yet |
| GHSA-x7wf-5mjc-6x76 SSRF attacks via tracebacks in Plone |
High EPSS 1.45% |
< 5.2.3 | 5.2.3 |
| GHSA-2c8c-84w2-j38j Improper Restriction of XML External Entity Reference in Plone |
High EPSS 1.45% |
< 5.2.3 | 5.2.3 |
| GHSA-x7wf-5mjc-6x76 SSRF attacks via tracebacks in Plone |
High EPSS 1.45% |
< 5.2.3 | 5.2.3 |
| GHSA-wq6x-g685-w5f2 Improper Restriction of XML External Entity Reference in Plone |
High EPSS 1.45% |
< 5.2.3 | 5.2.3 |
| GHSA-wq6x-g685-w5f2 Improper Restriction of XML External Entity Reference in Plone |
High EPSS 1.45% |
< 5.2.3 | 5.2.3 |
| GHSA-2c8c-84w2-j38j Improper Restriction of XML External Entity Reference in Plone |
High EPSS 1.45% |
< 5.2.3 | 5.2.3 |
| GHSA-cjg3-q24h-9qwf Plone Privilege Escallation |
High EPSS 1.47% |
>= 5.2.0, < 5.2.2 | 5.2.2 |
| GHSA-cw58-gpgw-hwx2 Plone allows weak passwords |
High EPSS 1.26% |
>= 5.0rc1, < 5.1.7 | 5.1.7 |
| GHSA-w6g9-xccc-347h Plone Unauthenticated Write Vulnerability |
Critical EPSS 2.27% |
>= 4.3, <= 5.2.1 | No fix yet |
| GHSA-w6g9-xccc-347h Plone Unauthenticated Write Vulnerability |
Critical EPSS 2.27% |
>= 4.3, < 5.2.2 | 5.2.2 |
| GHSA-82j9-wfcf-9v2h Plone Open Redirect Vulnerability |
Medium EPSS 0.92% |
>= 4.0, < 4.3.20 | 4.3.20 |
| GHSA-82j9-wfcf-9v2h Plone Open Redirect Vulnerability |
Medium EPSS 0.92% |
>= 5.0rc1, < 5.1.7 | 5.1.7 |
| GHSA-82j9-wfcf-9v2h Plone Open Redirect Vulnerability |
Medium EPSS 0.92% |
>= 5.2.0, < 5.2.2 | 5.2.2 |
| GHSA-cw58-gpgw-hwx2 Plone allows weak passwords |
High EPSS 1.26% |
>= 4.3, < 4.3.20 | 4.3.20 |
| GHSA-82j9-wfcf-9v2h Plone Open Redirect Vulnerability |
Medium EPSS 0.92% |
>= 4.0, < 5.2.2 | 5.2.2 |
| GHSA-8mc4-2xrc-g582 Plone cross site scripting (XSS) |
Medium EPSS 0.81% |
>= 5.0, < 5.2.2 | 5.2.2 |
| GHSA-8mc4-2xrc-g582 Plone cross site scripting (XSS) |
Medium EPSS 0.81% |
>= 5.0, <= 5.2.1 | No fix yet |
| GHSA-hhmf-7rgg-gcw5 Plone SQL Injection Vulnerability |
High EPSS 1.23% |
>= 4.0, < 5.2.2 | 5.2.2 |
| GHSA-hhmf-7rgg-gcw5 Plone SQL Injection Vulnerability |
High EPSS 1.23% |
>= 4.0, <= 5.2.1 | No fix yet |
| GHSA-cw58-gpgw-hwx2 Plone allows weak passwords |
High EPSS 1.26% |
>= 4.3, < 5.2.1 | 5.2.1 |
| GHSA-cw58-gpgw-hwx2 Plone allows weak passwords |
High EPSS 1.26% |
>= 5.2.0, < 5.2.2 | 5.2.2 |
| GHSA-cjg3-q24h-9qwf Plone Privilege Escallation |
High EPSS 1.47% |
>= 5.2.0, < 5.2.2 | 5.2.2 |
| GHSA-4793-w44w-m7xm Plone Zope cross-site scripting (XSS) vulnerability |
Medium EPSS 1.39% |
>= 3.3, < 4.0a1>= 4.0, < 4.0.10>= 4.1, < 4.2a1>= 4.2, < 4.3a1>= 4.3, < 4.3.3 | 4.0a14.0.104.2a14.3a14.3.3 |
| GHSA-4793-w44w-m7xm Plone Zope cross-site scripting (XSS) vulnerability |
Medium EPSS 1.39% |
>= 4.0, < 4.0.9 | 4.0.9 |
| GHSA-4793-w44w-m7xm Plone Zope cross-site scripting (XSS) vulnerability |
Medium EPSS 1.39% |
>= 3.3, < 3.3.6 | 3.3.6 |
| GHSA-4793-w44w-m7xm Plone Zope cross-site scripting (XSS) vulnerability |
Medium EPSS 1.39% |
>= 4.1, < 4.1.6 | 4.1.6 |
| GHSA-4793-w44w-m7xm Plone Zope cross-site scripting (XSS) vulnerability |
Medium EPSS 1.39% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-xvwv-6wvx-px9x Plone Open Redirect |
Medium EPSS 0.92% |
>= 2.5, < 5.1.0 | 5.1.0 |
| GHSA-xvwv-6wvx-px9x Plone Open Redirect |
Medium EPSS 0.92% |
>= 2.5, < 4.3.16 | 4.3.16 |
| GHSA-xvwv-6wvx-px9x Plone Open Redirect |
Medium EPSS 0.92% |
>= 5.0.0, < 5.1.0 | 5.1.0 |
| GHSA-8g72-gq68-6gqh Products.CMFPlone Open Redirect Vulnerability |
Medium EPSS 0.69% |
>= 2.5, < 4.3.16>= 5, < 5.1.0 | 4.3.165.1.0 |
| GHSA-859j-668v-mrr6 Products.CMFPlone XSS in profile home_page property |
Medium EPSS 0.56% |
>= 2.5a1, < 4.3.16 | 4.3.16 |
| GHSA-859j-668v-mrr6 Products.CMFPlone XSS in profile home_page property |
Medium EPSS 0.56% |
>= 2.5, < 4.3.16>= 5, < 5.1.0 | 4.3.165.1.0 |
| GHSA-8g72-gq68-6gqh Products.CMFPlone Open Redirect Vulnerability |
Medium EPSS 0.69% |
>= 5, < 5.1.0 | 5.1.0 |
| GHSA-859j-668v-mrr6 Products.CMFPlone XSS in profile home_page property |
Medium EPSS 0.56% |
>= 5.0a1, < 5.1.0 | 5.1.0 |
| GHSA-qc57-h2f7-p4hx Plone Unauthorized Access Vulnerability |
Medium EPSS 0.93% |
>= 2.5, < 4.3.16 | 4.3.16 |
| GHSA-qc57-h2f7-p4hx Plone Unauthorized Access Vulnerability |
Medium EPSS 0.93% |
>= 5.0, < 5.1.0 | 5.1.0 |
| GHSA-qc57-h2f7-p4hx Plone Unauthorized Access Vulnerability |
Medium EPSS 0.93% |
>= 2.5, < 4.3.16>= 5, < 5.1.0 | 4.3.165.1.0 |
| GHSA-8g72-gq68-6gqh Products.CMFPlone Open Redirect Vulnerability |
Medium EPSS 0.69% |
>= 2.5, < 4.3.16 | 4.3.16 |
| GHSA-p3qm-44cf-f8qx Plone vulnerable to cross-site request forgery |
High EPSS 3.04% |
< 5.0a1 | 5.0a1 |
| GHSA-p3qm-44cf-f8qx Plone vulnerable to cross-site request forgery |
High EPSS 3.04% |
< 5.0a1 | 5.0a1 |
| GHSA-vf8g-m3vq-6p4p Plone Cross-site Scripting Vulnerability |
Medium EPSS 1.42% |
>= 4.3, < 4.3.7 | 4.3.7 |
| GHSA-984m-rj28-8c6x Plone unauthorized member addition vulnerability |
Medium EPSS 2.02% |
>= 3.3, <= 3.3.6 | No fix yet |
| GHSA-984m-rj28-8c6x Plone unauthorized member addition vulnerability |
Medium EPSS 2.02% |
>= 4.0a1, <= 4.0.10 | No fix yet |
| GHSA-984m-rj28-8c6x Plone unauthorized member addition vulnerability |
Medium EPSS 2.02% |
>= 4.1a1, <= 4.1.6 | No fix yet |
| GHSA-984m-rj28-8c6x Plone unauthorized member addition vulnerability |
Medium EPSS 2.02% |
>= 4.2a1, <= 4.2.7 | No fix yet |
| GHSA-984m-rj28-8c6x Plone unauthorized member addition vulnerability |
Medium EPSS 2.02% |
>= 4.3a1, <= 4.3.6 | No fix yet |
| GHSA-984m-rj28-8c6x Plone unauthorized member addition vulnerability |
Medium EPSS 2.02% |
No fix yet | |
| GHSA-984m-rj28-8c6x Plone unauthorized member addition vulnerability |
Medium EPSS 2.02% |
>= 3.3, < 4.0a1>= 4.0, < 4.1a1>= 4.1, < 4.2a1>= 4.2, < 4.3a1>= 4.3, < 4.3.7>= 5.0a1, < 5.0rc2 | 4.0a14.1a14.2a14.3a14.3.75.0rc2 |
| GHSA-fq9r-8jpm-2222 Plone Header Injection |
High EPSS 1.75% |
>= 3.3, < 4.0a1 | 4.0a1 |
| GHSA-fq9r-8jpm-2222 Plone Header Injection |
High EPSS 1.75% |
>= 3.3, < 4.0a1 | 4.0a1 |
| GHSA-vf8g-m3vq-6p4p Plone Cross-site Scripting Vulnerability |
Medium EPSS 1.42% |
>= 3.3, < 3.3.7 | 3.3.7 |
| GHSA-vf8g-m3vq-6p4p Plone Cross-site Scripting Vulnerability |
Medium EPSS 1.42% |
>= 4.0, < 4.0.11 | 4.0.11 |
| GHSA-vf8g-m3vq-6p4p Plone Cross-site Scripting Vulnerability |
Medium EPSS 1.42% |
>= 4.1, < 4.1.7 | 4.1.7 |
| GHSA-vf8g-m3vq-6p4p Plone Cross-site Scripting Vulnerability |
Medium EPSS 1.42% |
>= 4.2, < 4.2.8 | 4.2.8 |
| GHSA-vf8g-m3vq-6p4p Plone Cross-site Scripting Vulnerability |
Medium EPSS 1.42% |
No fix yet | |
| GHSA-vf8g-m3vq-6p4p Plone Cross-site Scripting Vulnerability |
Medium EPSS 1.42% |
>= 3.3, < 4.0a1>= 4.0, < 4.1a1>= 4.1, < 4.2a1>= 4.2, < 4.3a1>= 4.3, < 4.3.7>= 5.0a1, < 5.0rc2 | 4.0a14.1a14.2a14.3a14.3.75.0rc2 |
| GHSA-p5wr-vp8g-q5p4 Plone Sandbox Escape |
Medium EPSS 1.92% |
>= 4.0, < 4.3.12 | 4.3.12 |
| GHSA-p5wr-vp8g-q5p4 Plone Sandbox Escape |
Medium EPSS 1.92% |
>= 5.1a1, < 5.1b1 | 5.1b1 |
| GHSA-p5wr-vp8g-q5p4 Plone Sandbox Escape |
Medium EPSS 1.92% |
>= 5.0rc1, < 5.0.7 | 5.0.7 |
| GHSA-p5wr-vp8g-q5p4 Plone Sandbox Escape |
Medium EPSS 1.92% |
< 4.3.12>= 5.0a1, < 5.0.7 | 4.3.125.0.7 |
| GHSA-chvw-gjxf-f8mc Plone vulnerable to Cross-site Scripting |
Medium EPSS 1.59% |
>= 5.0, < 5.0.7>= 4.0, < 4.3.12>= 3.3, < 4.0a1 | 4.0a14.3.125.0.7 |
| GHSA-chvw-gjxf-f8mc Plone vulnerable to Cross-site Scripting |
Medium EPSS 1.59% |
>= 3.3a1, < 4.3.12 | 4.3.12 |
| GHSA-chvw-gjxf-f8mc Plone vulnerable to Cross-site Scripting |
Medium EPSS 1.59% |
>= 5.0a1, < 5.0.7 | 5.0.7 |
| GHSA-69vh-662j-v988 Plone Open Redirect Vulnerability |
Medium EPSS 1.67% |
>= 5.0, <= 5.0.6 | No fix yet |
| GHSA-pp4c-2692-7f37 Plone Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.59% |
>= 5.0, < 5.0.6 | 5.0.6 |
| GHSA-69vh-662j-v988 Plone Open Redirect Vulnerability |
Medium EPSS 1.67% |
>= 5.0, < 5.0.7>= 4.0, < 4.3.12>= 3.3, < 4.0a1 | 4.0a14.3.125.0.7 |
| GHSA-69vh-662j-v988 Plone Open Redirect Vulnerability |
Medium EPSS 1.67% |
>= 3.3, <= 3.3.6 | No fix yet |
| GHSA-69vh-662j-v988 Plone Open Redirect Vulnerability |
Medium EPSS 1.67% |
>= 4.0, <= 4.3.11 | No fix yet |
| GHSA-m7f9-65wr-pwch Plone vulnerable to filesystem information leak |
Medium EPSS 2.60% |
>= 5.0, < 5.0.7>= 4.2, < 4.3.12 | 4.3.125.0.7 |
| GHSA-m7f9-65wr-pwch Plone vulnerable to filesystem information leak |
Medium EPSS 2.60% |
>= 4.2, < 4.3.12 | 4.3.12 |
| GHSA-m7f9-65wr-pwch Plone vulnerable to filesystem information leak |
Medium EPSS 2.60% |
>= 5.0, < 5.0.7 | 5.0.7 |
| GHSA-22jm-p2vv-j2hc Plone XSS |
Medium EPSS 1.59% |
>= 5.0.0, <= 5.0.6 | No fix yet |
| GHSA-22jm-p2vv-j2hc Plone XSS |
Medium EPSS 1.59% |
>= 4.0.0, <= 4.3.11 | No fix yet |
| GHSA-22jm-p2vv-j2hc Plone XSS |
Medium EPSS 1.59% |
>= 5.0, < 5.0.7>= 4.2, < 4.3.12 | 4.3.125.0.7 |
| GHSA-v3hp-f8qr-cf3p Plone XSS |
Medium EPSS 1.59% |
>= 5.0, < 5.0.7>= 4.0, < 4.3.12>= 3.3, < 4.0a1 | 4.0a14.3.125.0.7 |
| GHSA-v3hp-f8qr-cf3p Plone XSS |
Medium EPSS 1.59% |
>= 3.3.0, <= 3.3.6 | No fix yet |
| GHSA-v3hp-f8qr-cf3p Plone XSS |
Medium EPSS 1.59% |
>= 4.0.0, <= 4.3.11 | No fix yet |
| GHSA-v3hp-f8qr-cf3p Plone XSS |
Medium EPSS 1.59% |
>= 5.0.0, <= 5.0.6 | No fix yet |
| GHSA-pp4c-2692-7f37 Plone Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.59% |
>= 5.0, < 5.0.7>= 4.0, < 4.3.12>= 3.3, < 4.0a1 | 4.0a14.3.125.0.7 |
| GHSA-pp4c-2692-7f37 Plone Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.59% |
>= 3.3, <= 3.3.6 | No fix yet |
| GHSA-pp4c-2692-7f37 Plone Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.59% |
>= 4.0a1, < 4.3.12 | 4.3.12 |
| GHSA-6h8x-73fx-q2h9 Chameleon in Plone allows Authentication Bypass |
Medium EPSS 1.01% |
>= 5.0rc1, < 5.1a2 | 5.1a2 |
| GHSA-v4vj-49m5-wjhw Plone vulnerable to unauthorized disclosure of site content |
Medium EPSS 1.13% |
>= 5.0, < 5.0.5 | 5.0.5 |
| GHSA-6h8x-73fx-q2h9 Chameleon in Plone allows Authentication Bypass |
Medium EPSS 1.01% |
No fix yet | |
| GHSA-6h8x-73fx-q2h9 Chameleon in Plone allows Authentication Bypass |
Medium EPSS 1.01% |
>= 5.0rc1, <= 5.0.4 | No fix yet |
| GHSA-v4vj-49m5-wjhw Plone vulnerable to unauthorized disclosure of site content |
Medium EPSS 1.13% |
>= 3.3, < 4.3.10 | 4.3.10 |
| GHSA-v4vj-49m5-wjhw Plone vulnerable to unauthorized disclosure of site content |
Medium EPSS 1.13% |
>= 3.3, < 5.1a2 | 5.1a2 |
| GHSA-qqgj-22gr-73vx Plone vulnerable to privilege escalation in WebDAV |
High EPSS 1.49% |
>= 4.0, < 5.1a2 | 5.1a2 |
| GHSA-qqgj-22gr-73vx Plone vulnerable to privilege escalation in WebDAV |
High EPSS 1.49% |
>= 5.1a1, < 5.1a2 | 5.1a2 |
| GHSA-qqgj-22gr-73vx Plone vulnerable to privilege escalation in WebDAV |
High EPSS 1.49% |
>= 5.0, < 5.0.5 | 5.0.5 |
| GHSA-qqgj-22gr-73vx Plone vulnerable to privilege escalation in WebDAV |
High EPSS 1.49% |
>= 3.3, < 4.3.10 | 4.3.10 |
| GHSA-84jm-cpc5-c7g7 Plone XSS in Zope ZMI |
Medium EPSS 1.33% |
>= 5.0, < 5.0.7 | 5.0.7 |
| GHSA-84jm-cpc5-c7g7 Plone XSS in Zope ZMI |
Medium EPSS 1.33% |
>= 4.0, < 4.3.12 | 4.3.12 |
| GHSA-84jm-cpc5-c7g7 Plone XSS in Zope ZMI |
Medium EPSS 1.33% |
< 4.3.12>= 5.0, < 5.0.7 | 4.3.125.0.7 |
| GHSA-wprr-mc54-c62q Exposure of Sensitive Information in Plone |
Medium EPSS 2.34% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-wprr-mc54-c62q Exposure of Sensitive Information in Plone |
Medium EPSS 2.34% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-wprr-mc54-c62q Exposure of Sensitive Information in Plone |
Medium EPSS 2.34% |
< 4.2.3 | 4.2.3 |
| GHSA-2q75-f7cp-w86q Plone contains Cross-site Request Forgery |
Medium EPSS 1.10% |
< 4.2.3 | 4.2.3 |
| GHSA-2q75-f7cp-w86q Plone contains Cross-site Request Forgery |
Medium EPSS 1.10% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-48vv-2pmq-9fvv Plone and Zope2 do not reseed pseudo-random number generator |
High EPSS 2.38% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-48vv-2pmq-9fvv Plone and Zope2 do not reseed pseudo-random number generator |
High EPSS 2.38% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-48vv-2pmq-9fvv Plone and Zope2 do not reseed pseudo-random number generator |
High EPSS 2.38% |
>= 3.2.2, < 4.2.3 | 4.2.3 |
| GHSA-2q75-f7cp-w86q Plone contains Cross-site Request Forgery |
Medium EPSS 1.10% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-3g6w-4m7x-97v6 Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-3g6w-4m7x-97v6 Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-3g6w-4m7x-97v6 Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
< 4.2.3 | 4.2.3 |
| GHSA-f8pg-wp5j-rjxx Plone Information Disclosure |
Medium EPSS 1.24% |
< 4.2.3 | 4.2.3 |
| GHSA-f8pg-wp5j-rjxx Plone Information Disclosure |
Medium EPSS 1.24% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-f8pg-wp5j-rjxx Plone Information Disclosure |
Medium EPSS 1.24% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-25jh-5h5r-h33m Plone Sandbox Bypass |
Critical EPSS 1.71% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-25jh-5h5r-h33m Plone Sandbox Bypass |
Critical EPSS 1.71% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-9m4g-f42q-vrrh Plone Sandbox Bypass |
Critical EPSS 1.71% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-9m4g-f42q-vrrh Plone Sandbox Bypass |
Critical EPSS 1.71% |
< 4.2.3 | 4.2.3 |
| GHSA-97rj-p794-wq6m Plone denial of service via Caching Bypass |
High EPSS 2.67% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-cq5g-924m-7fxh Plone Information Disclosure |
High EPSS 1.41% |
< 4.2.3 | 4.2.3 |
| GHSA-cq5g-924m-7fxh Plone Information Disclosure |
High EPSS 1.41% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-cq5g-924m-7fxh Plone Information Disclosure |
High EPSS 1.41% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-cxw7-85xm-3xrc Plone Code Injection vulnerability |
Critical EPSS 2.61% |
< 4.2.3 | 4.2.3 |
| GHSA-cxw7-85xm-3xrc Plone Code Injection vulnerability |
Critical EPSS 2.61% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-cxw7-85xm-3xrc Plone Code Injection vulnerability |
Critical EPSS 2.61% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-25jh-5h5r-h33m Plone Sandbox Bypass |
Critical EPSS 1.71% |
< 4.2.3 | 4.2.3 |
| GHSA-97rj-p794-wq6m Plone denial of service via Caching Bypass |
High EPSS 2.67% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-gx6w-hcw3-5r37 Plone DoS via Crafted URL |
High EPSS 1.62% |
< 4.0 | 4.0 |
| GHSA-gx6w-hcw3-5r37 Plone DoS via Crafted URL |
High EPSS 1.62% |
< 3.3.6 | 3.3.6 |
| GHSA-97rj-p794-wq6m Plone denial of service via Caching Bypass |
High EPSS 2.67% |
< 4.2.3 | 4.2.3 |
| GHSA-9m4g-f42q-vrrh Plone Sandbox Bypass |
Critical EPSS 1.71% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-hr59-35cr-qf43 Plone Cross-site scripting Vulnerability |
Medium EPSS 0.98% |
< 4.2.3 | 4.2.3 |
| GHSA-hr59-35cr-qf43 Plone Cross-site scripting Vulnerability |
Medium EPSS 0.98% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-hr59-35cr-qf43 Plone Cross-site scripting Vulnerability |
Medium EPSS 0.98% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-5whw-5cmm-9jw4 Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-5whw-5cmm-9jw4 Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
< 4.2.3 | 4.2.3 |
| GHSA-prr5-pfr8-q9f3 Plone allows remote attackers to read hidden folder contents |
High EPSS 2.14% |
< 4.2.3 | 4.2.3 |
| GHSA-prr5-pfr8-q9f3 Plone allows remote attackers to read hidden folder contents |
High EPSS 2.14% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-prr5-pfr8-q9f3 Plone allows remote attackers to read hidden folder contents |
High EPSS 2.14% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-pvhv-qwc8-r2pg Plone Arbitrary File Read |
High EPSS 1.41% |
< 4.2.3 | 4.2.3 |
| GHSA-pvhv-qwc8-r2pg Plone Arbitrary File Read |
High EPSS 1.41% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-pvhv-qwc8-r2pg Plone Arbitrary File Read |
High EPSS 1.41% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-q46g-v7r4-9vhr Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
< 4.2.3 | 4.2.3 |
| GHSA-q46g-v7r4-9vhr Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-q46g-v7r4-9vhr Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-79hj-474h-v4xv Plone denial of service via RSS Feed Request |
High EPSS 1.62% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-79hj-474h-v4xv Plone denial of service via RSS Feed Request |
High EPSS 1.62% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-79hj-474h-v4xv Plone denial of service via RSS Feed Request |
High EPSS 1.62% |
< 4.2.3 | 4.2.3 |
| GHSA-6w93-4c4p-xv2x Plone Metadata Disclosure |
Medium EPSS 1.41% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-6w93-4c4p-xv2x Plone Metadata Disclosure |
Medium EPSS 1.41% |
>= 4.3a0, < 4.3b1 | 4.3b1 |
| GHSA-6w93-4c4p-xv2x Plone Metadata Disclosure |
Medium EPSS 1.41% |
< 4.2.3 | 4.2.3 |
| GHSA-7hxc-mwx7-5hmc Plone Code Injection vulnerability |
High EPSS 2.08% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-7hxc-mwx7-5hmc Plone Code Injection vulnerability |
High EPSS 2.08% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-7hxc-mwx7-5hmc Plone Code Injection vulnerability |
High EPSS 2.08% |
< 4.2.3 | 4.2.3 |
| GHSA-3qpr-7rmg-73v8 Plone and Zope2 affected by Race Condition |
High EPSS 1.44% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-3qpr-7rmg-73v8 Plone and Zope2 affected by Race Condition |
High EPSS 1.44% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-3qpr-7rmg-73v8 Plone and Zope2 affected by Race Condition |
High EPSS 1.44% |
>= 3.2.2, < 4.2.3 | 4.2.3 |
| GHSA-w6pw-5gh5-4952 Plone python code injection |
Critical EPSS 1.68% |
< 4.2.3 | 4.2.3 |
| GHSA-w6pw-5gh5-4952 Plone python code injection |
Critical EPSS 1.68% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-w6pw-5gh5-4952 Plone python code injection |
Critical EPSS 1.68% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-wrf2-2rch-cmr9 Plone is vulnerable to denial of service |
High EPSS 2.45% |
>= 4.0, < 4.2.3 | 4.2.3 |
| GHSA-wrf2-2rch-cmr9 Plone is vulnerable to denial of service |
High EPSS 2.45% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-wrf2-2rch-cmr9 Plone is vulnerable to denial of service |
High EPSS 2.45% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-879r-7f3w-8jj3 Plone and Zope2 vulnerable to unauthorized access to restricted attributes |
Medium EPSS 1.94% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-879r-7f3w-8jj3 Plone and Zope2 vulnerable to unauthorized access to restricted attributes |
Medium EPSS 1.94% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-879r-7f3w-8jj3 Plone and Zope2 vulnerable to unauthorized access to restricted attributes |
Medium EPSS 1.94% |
>= 3.2.2, < 4.2.3 | 4.2.3 |
| GHSA-77hv-8796-8ccp HTTP header injection in Plone and Zope2 |
High EPSS 2.52% |
< 4.2.3 | 4.2.3 |
| GHSA-77hv-8796-8ccp HTTP header injection in Plone and Zope2 |
High EPSS 2.52% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-77hv-8796-8ccp HTTP header injection in Plone and Zope2 |
High EPSS 2.52% |
>= 3.3.2, < 4.2.3 | 4.2.3 |
| GHSA-5whw-5cmm-9jw4 Plone Cross-site scripting Vulnerability |
Medium EPSS 1.20% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-683w-84m7-p8pw Plone User account enumeration via crafted URL |
Medium EPSS 2.14% |
< 4.2.3 | 4.2.3 |
| GHSA-683w-84m7-p8pw Plone User account enumeration via crafted URL |
Medium EPSS 2.14% |
>= 4.3a1, < 4.3b1 | 4.3b1 |
| GHSA-683w-84m7-p8pw Plone User account enumeration via crafted URL |
Medium EPSS 2.14% |
< 4.2.3>= 4.3a0, < 4.3b1 | 4.2.34.3b1 |
| GHSA-rg52-j87w-pf83 Plone Filesystem path information leak |
Medium EPSS 2.14% |
>= 3.3, < 4.3.3 | 4.3.3 |
| GHSA-rg52-j87w-pf83 Plone Filesystem path information leak |
Medium EPSS 2.14% |
>= 3.3, < 4.3.3 | 4.3.3 |
| GHSA-4vr8-r7qr-fpvq Plone Privilege escalation through exposed underlying API |
Medium EPSS 1.31% |
>= 3.3b1, < 4.3.3 | 4.3.3 |
| GHSA-4vr8-r7qr-fpvq Plone Privilege escalation through exposed underlying API |
Medium EPSS 1.31% |
>= 3.3, < 4.3.3 | 4.3.3 |
| GHSA-mm32-jw73-9227 Plone is vulnerable to File System Path Exposure |
Low EPSS 1.22% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-w3pw-qxjj-6prr Plone Authenticated Denial of Service vulnerability |
Medium EPSS 1.35% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-w3pw-qxjj-6prr Plone Authenticated Denial of Service vulnerability |
Medium EPSS 1.35% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-mm32-jw73-9227 Plone is vulnerable to File System Path Exposure |
Low EPSS 1.22% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-w3pw-qxjj-6prr Plone Authenticated Denial of Service vulnerability |
Medium EPSS 1.35% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-qphh-5fv5-2mjj Plone is vulnerable to information exposure via the object manager implementation |
Medium EPSS 1.38% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-f5h9-3hpf-9j8m Plone is vulnerable to email spoofing |
Medium EPSS 1.10% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-f5h9-3hpf-9j8m Plone is vulnerable to email spoofing |
Medium EPSS 1.10% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-qjxf-6pr8-j87v Plone's authenticated users able to alter their password despite of policy definition |
Medium EPSS 1.12% |
>= 2.1, <= 4.1 | No fix yet |
| GHSA-qjxf-6pr8-j87v Plone's authenticated users able to alter their password despite of policy definition |
Medium EPSS 1.12% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-qjxf-6pr8-j87v Plone's authenticated users able to alter their password despite of policy definition |
Medium EPSS 1.12% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-qjxf-6pr8-j87v Plone's authenticated users able to alter their password despite of policy definition |
Medium EPSS 1.12% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-f5h9-3hpf-9j8m Plone is vulnerable to email spoofing |
Medium EPSS 1.10% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-grwx-4p5v-9g2g Plone is vulnerable to Information Exposure when generating zip archives |
Medium EPSS 1.19% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-grwx-4p5v-9g2g Plone is vulnerable to Information Exposure when generating zip archives |
Medium EPSS 1.19% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-grwx-4p5v-9g2g Plone is vulnerable to Information Exposure when generating zip archives |
Medium EPSS 1.19% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-xfjq-9rxq-ph6m Plone Denial of Service vulnerability via decompressing large zip archives |
Low EPSS 1.08% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-6fgf-x7wg-hp8r Plone Unrestricted Filed Manipulation vulnerability via content edit forms |
Medium EPSS 1.19% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-grwx-4p5v-9g2g Plone is vulnerable to Information Exposure when generating zip archives |
Medium EPSS 1.19% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-f5h9-3hpf-9j8m Plone is vulnerable to email spoofing |
Medium EPSS 1.10% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-6fgf-x7wg-hp8r Plone Unrestricted Filed Manipulation vulnerability via content edit forms |
Medium EPSS 1.19% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-j67j-8hrp-76xm Plone Multiple open redirect vulnerabilities |
Medium EPSS 1.19% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-j67j-8hrp-76xm Plone Multiple open redirect vulnerabilities |
Medium EPSS 1.19% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-j67j-8hrp-76xm Plone Multiple open redirect vulnerabilities |
Medium EPSS 1.19% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-j67j-8hrp-76xm Plone Multiple open redirect vulnerabilities |
Medium EPSS 1.19% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-xfjq-9rxq-ph6m Plone Denial of Service vulnerability via decompressing large zip archives |
Low EPSS 1.08% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-xfjq-9rxq-ph6m Plone Denial of Service vulnerability via decompressing large zip archives |
Low EPSS 1.08% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-xfjq-9rxq-ph6m Plone Denial of Service vulnerability via decompressing large zip archives |
Low EPSS 1.08% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-mm32-jw73-9227 Plone is vulnerable to File System Path Exposure |
Low EPSS 1.22% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-jjvw-3h9j-p7jf Plone Improper Access Control Vulnerability |
High EPSS 1.26% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-jjvw-3h9j-p7jf Plone Improper Access Control Vulnerability |
High EPSS 1.26% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-jjvw-3h9j-p7jf Plone Improper Access Control Vulnerability |
High EPSS 1.26% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-jjvw-3h9j-p7jf Plone Improper Access Control Vulnerability |
High EPSS 1.26% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-89rq-27xp-vgv7 Plone vulnerable to cross-site scripting |
Medium EPSS 1.82% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-89rq-27xp-vgv7 Plone vulnerable to cross-site scripting |
Medium EPSS 1.82% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-mm32-jw73-9227 Plone is vulnerable to File System Path Exposure |
Low EPSS 1.22% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-89rq-27xp-vgv7 Plone vulnerable to cross-site scripting |
Medium EPSS 1.82% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-89rq-27xp-vgv7 Plone vulnerable to cross-site scripting |
Medium EPSS 1.82% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-w3pw-qxjj-6prr Plone Authenticated Denial of Service vulnerability |
Medium EPSS 1.35% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-pwpq-632g-h49g Plone Privilege escalation due improper authorization |
Medium EPSS 1.26% |
>= 2.1, <= 4.1 | No fix yet |
| GHSA-pwpq-632g-h49g Plone Privilege escalation due improper authorization |
Medium EPSS 1.26% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-pwpq-632g-h49g Plone Privilege escalation due improper authorization |
Medium EPSS 1.26% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-pwpq-632g-h49g Plone Privilege escalation due improper authorization |
Medium EPSS 1.26% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-6fgf-x7wg-hp8r Plone Unrestricted Filed Manipulation vulnerability via content edit forms |
Medium EPSS 1.19% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-6fgf-x7wg-hp8r Plone Unrestricted Filed Manipulation vulnerability via content edit forms |
Medium EPSS 1.19% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-qphh-5fv5-2mjj Plone is vulnerable to information exposure via the object manager implementation |
Medium EPSS 1.38% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-qphh-5fv5-2mjj Plone is vulnerable to information exposure via the object manager implementation |
Medium EPSS 1.38% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-qphh-5fv5-2mjj Plone is vulnerable to information exposure via the object manager implementation |
Medium EPSS 1.38% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-56p3-rrp4-2j82 Plone Open Redirection vulnerability via next parameter |
High EPSS 2.22% |
>= 2.1, < 4.1.1>= 4.2, < 4.2.6>= 4.3, < 4.3.2 | 4.1.14.2.64.3.2 |
| GHSA-56p3-rrp4-2j82 Plone Open Redirection vulnerability via next parameter |
High EPSS 2.22% |
>= 4.3, < 4.3.2 | 4.3.2 |
| GHSA-56p3-rrp4-2j82 Plone Open Redirection vulnerability via next parameter |
High EPSS 2.22% |
>= 2.1, < 4.1.1 | 4.1.1 |
| GHSA-56p3-rrp4-2j82 Plone Open Redirection vulnerability via next parameter |
High EPSS 2.22% |
>= 4.2, < 4.2.6 | 4.2.6 |
| GHSA-pcwm-8jc3-qxvj Plone Denial of Service vulnerability |
High EPSS 3.22% |
< 4.1.4 | 4.1.4 |
| GHSA-pcwm-8jc3-qxvj Plone Denial of Service vulnerability |
High EPSS 3.22% |
< 4.1.4 | 4.1.4 |
| GHSA-p6h9-hpcg-c6gm High severity vulnerability that affects Plone and Zope2 |
High EPSS 2.03% |
>= 3.3.2, < 3.3.6 | 3.3.6 |
| GHSA-p6h9-hpcg-c6gm High severity vulnerability that affects Plone and Zope2 |
High EPSS 2.03% |
<= 3.0<= 3.0.1<= 3.0.2<= 3.0.3<= 3.0.4<= 3.0.5<= 3.0.6<= 3.1<= 3.1.1<= 3.1.2<= 3.1.3<= 3.1.4<= 3.1.5.1<= 3.1.6<= 3.1.7<= 3.2<= 3.2.1<= 3.2.2<= 3.2.3<= 3.3<= 3.3.1<= 3.3.2<= 3.3.3<= 3.3.4<= 3.3.5<= 3.3.6<= 4.0<= 4.0.1<= 4.0.2<= 4.0.3<= 4.0.4<= 4.0.5<= 4.0.6.1<= 4.0.7<= 4.0.8<= 4.1<= 2.12.0<= 2.12.0-a1<= 2.12.0-a2<= 2.12.0-a3<= 2.12.0-a4<= 2.12.0-b1<= 2.12.0-b2<= 2.12.0-b3<= 2.12.0-b4<= 2.12.1<= 2.12.2<= 2.12.3<= 2.12.4<= 2.12.5<= 2.12.6<= 2.12.7<= 2.12.8<= 2.12.9<= 2.12.10<= 2.12.11<= 2.12.12<= 2.12.13<= 2.12.14<= 2.12.15<= 2.12.16<= 2.12.17<= 2.12.18<= 2.13.0<= 2.13.0-a1<= 2.13.0-a2<= 2.13.0-a3<= 2.13.0-a4<= 2.13.0-b1<= 2.13.0-c1<= 2.13.1<= 2.13.2<= 2.13.3<= 2.13.4<= 2.13.5<= 2.13.6<= 2.13.7 | No fix yet |
| GHSA-p6h9-hpcg-c6gm High severity vulnerability that affects Plone and Zope2 |
High EPSS 2.03% |
>= 3.3.2, < 3.3.6 | 3.3.6 |
| GHSA-p7h9-vf92-5fj5 Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool |
Medium EPSS 2.39% |
< 4.1.1 | 4.1.1 |
| GHSA-h6hq-c896-w882 Plone Cross-site Scripting vulnerability |
Medium EPSS 1.87% |
>= 3.3.2, < 3.3.6 | 3.3.6 |
| GHSA-h6hq-c896-w882 Plone Cross-site Scripting vulnerability |
Medium EPSS 1.87% |
>= 4.0a0, < 4.0.6 | 4.0.6 |
| GHSA-h6hq-c896-w882 Plone Cross-site Scripting vulnerability |
Medium EPSS 1.87% |
>= 4.1a0, < 4.1.1 | 4.1.1 |
| GHSA-p7h9-vf92-5fj5 Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool |
Medium EPSS 2.39% |
< 4.1.1 | 4.1.1 |
| GHSA-2qx8-589j-gcpx Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts |
Medium EPSS 2.35% |
< 4.1.1 | 4.1.1 |
| GHSA-h6hq-c896-w882 Plone Cross-site Scripting vulnerability |
Medium EPSS 1.87% |
< 4.1.1 | 4.1.1 |
| GHSA-2qx8-589j-gcpx Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts |
Medium EPSS 2.35% |
>= 4.1.0, < 4.1.1 | 4.1.1 |
| GHSA-2qx8-589j-gcpx Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts |
Medium EPSS 2.35% |
>= 4.0.1, < 4.0.6 | 4.0.6 |
| GHSA-3v28-9jjp-4g5w Plone Privilege Escalation Vulnerability |
Critical EPSS 3.20% |
< 4.0.1 | 4.0.1 |
| GHSA-3v28-9jjp-4g5w Plone Privilege Escalation Vulnerability |
Critical EPSS 3.20% |
>= 2.5, < 4.0.4 | 4.0.4 |
| GHSA-qj7x-wm9q-qjx8 Plone Cross-site Scripting vulnerability in PortalTransforms |
Medium EPSS 1.97% |
>= 2.1, < 3.3.6 | 3.3.6 |
| GHSA-qj7x-wm9q-qjx8 Plone Cross-site Scripting vulnerability in PortalTransforms |
Medium EPSS 1.97% |
< 3.3.5 | 3.3.5 |
| PYSEC-2009-17 Moderate severity vulnerability that affects Products.PlonePAS |
Medium EPSS 0.97% |
>= 3.0, <= 3.1<= 3.2<= 3.3<= 3.4<= 3.5 | No fix yet |
| GHSA-4j3w-g62x-hrcp Plone Cross-site request forgery (CSRF) |
High EPSS 0.65% |
< 3.1 | 3.1 |
| GHSA-4j3w-g62x-hrcp Plone Cross-site request forgery (CSRF) |
High EPSS 0.65% |
>= 3.0.5, <= 3.0.6 | No fix yet |
| GHSA-4j3w-g62x-hrcp Plone Cross-site request forgery (CSRF) |
High EPSS 0.65% |
< 3.1 | 3.1 |
| GHSA-hf26-vvmx-x8c8 Plone Arbitrary Code Execution via Unsafe Handling of Pickles |
Critical EPSS 2.21% |
>= 3.0, < 3.0.3 | 3.0.3 |
| GHSA-hf26-vvmx-x8c8 Plone Arbitrary Code Execution via Unsafe Handling of Pickles |
Critical EPSS 2.21% |
>= 2.5, < 2.5.5 | 2.5.5 |
| GHSA-hf26-vvmx-x8c8 Plone Arbitrary Code Execution via Unsafe Handling of Pickles |
Critical EPSS 2.21% |
>= 2.5, < 2.5.5>= 3.0, < 3.0.3 | 2.5.53.0.3 |
| GHSA-r7j4-82xw-8m9p Plone allows a user to masquerade as a group |
Medium EPSS 1.01% |
<= 2.5<= 2.5.1 | No fix yet |
| GHSA-r7j4-82xw-8m9p Plone allows a user to masquerade as a group |
Medium EPSS 1.01% |
>= 2.5, < 2.5.2 | 2.5.2 |
| GHSA-r7j4-82xw-8m9p Plone allows a user to masquerade as a group |
Medium EPSS 1.01% |
>= 2.5, < 2.5.2 | 2.5.2 |
| GHSA-5hch-v5pq-x4qp Plone allows anonymous users to reset any users password through the web via Password Reset Tool |
Critical EPSS 1.03% |
>= 2.5, < 2.5.1 | 2.5.1 |
| GHSA-5hch-v5pq-x4qp Plone allows anonymous users to reset any users password through the web via Password Reset Tool |
Critical EPSS 1.03% |
<= 2.5<= 2.5.1_rc | No fix yet |
| GHSA-5hch-v5pq-x4qp Plone allows anonymous users to reset any users password through the web via Password Reset Tool |
Critical EPSS 1.03% |
>= 2.5, < 2.5.1 | 2.5.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor