Read the docs

plone

Records123All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

plone records in CISA KEV

No plone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Plonepas · all components

Priority LOW 29

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecifi…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.0097 Published 2009-04-23 Fixed in 3.9 CWE-287
Open these records in search →