Read the docs

plone

Records123All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

plone records in CISA KEV

No plone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Cmfeditions · all components

Priority MEDIUM 44

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecifi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01991 Published 2011-10-10 Fixed in 4.0.10, 4.1.1 +1 CWE-264
Open these records in search →