Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as…
Priority LOW 37Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and GitHub.
Summary
Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.
Why it matters now
EPSS 0.02031 81st percentileScored 2026-11-07
Fix Fixed Plone (PyPI): 3.3.6Zope2 (PyPI): 2.12.19, 2.13.8
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | Plone (PyPI) | 3.3.2 to before 3.3.6 | 3.3.6 | Patch available | GHSA-p6h9-hpcg-c6gm |
| — | Zope2 (PyPI) | 2.12.0 to before 2.12.19 | 2.12.19 | Patch available | GHSA-p6h9-hpcg-c6gm |
| — | Zope2 (PyPI) | 2.13.0 to before 2.13.8 | 2.13.8 | Patch available | GHSA-p6h9-hpcg-c6gm |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- Plone (PyPI) Vendor— Affected 3.3.2 to before 3.3.6 Fixed in 3.3.6 Patch available GHSA-p6h9-hpcg-c6gm
- Zope2 (PyPI) Vendor— Affected 2.12.0 to before 2.12.19 Fixed in 2.12.19 Patch available GHSA-p6h9-hpcg-c6gm
- Zope2 (PyPI) Vendor— Affected 2.13.0 to before 2.13.8 Fixed in 2.13.8 Patch available GHSA-p6h9-hpcg-c6gm
CPE configurations NVD · 78
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:plone:plone_hotfix_20110720:*:*:*:*:*:*:*:* | all versions | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.0.2:*:*:*:*:*:*:* | 3.0.2 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.0.3:*:*:*:*:*:*:* | 3.0.3 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.0.4:*:*:*:*:*:*:* | 3.0.4 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.0.5:*:*:*:*:*:*:* | 3.0.5 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.0.6:*:*:*:*:*:*:* | 3.0.6 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.1.1:*:*:*:*:*:*:* | 3.1.1 | Vulnerable | plone |
- cpe:2.3:a:plone:plone_hotfix_20110720:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.0.6:*:*:*:*:*:*:* Versions 3.0.6 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·plone
Show 68 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:plone:plone:3.1.2:*:*:*:*:*:*:* | 3.1.2 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.1.3:*:*:*:*:*:*:* | 3.1.3 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.1.4:*:*:*:*:*:*:* | 3.1.4 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.1.5.1:*:*:*:*:*:*:* | 3.1.5.1 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.1.6:*:*:*:*:*:*:* | 3.1.6 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.1.7:*:*:*:*:*:*:* | 3.1.7 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.2.3:*:*:*:*:*:*:* | 3.2.3 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:* | 3.3 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:* | 3.3.1 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:* | 3.3.2 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:* | 3.3.3 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:* | 3.3.4 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:* | 3.3.5 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:3.3.6:*:*:*:*:*:*:* | 3.3.6 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:* | 4.0.3 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:* | 4.0.4 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:* | 4.0.5 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0.6.1:*:*:*:*:*:*:* | 4.0.6.1 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:* | 4.0.7 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:* | 4.0.8 | Vulnerable | plone |
| cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | plone |
| cpe:2.3:a:zope:zope:2.12.0:*:*:*:*:*:*:* | 2.12.0 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.0:a1:*:*:*:*:*:* | 2.12.0 a1 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.0:a2:*:*:*:*:*:* | 2.12.0 a2 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.0:a3:*:*:*:*:*:* | 2.12.0 a3 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.0:a4:*:*:*:*:*:* | 2.12.0 a4 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.0:b1:*:*:*:*:*:* | 2.12.0 b1 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.0:b2:*:*:*:*:*:* | 2.12.0 b2 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.0:b3:*:*:*:*:*:* | 2.12.0 b3 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.0:b4:*:*:*:*:*:* | 2.12.0 b4 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.1:*:*:*:*:*:*:* | 2.12.1 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.2:*:*:*:*:*:*:* | 2.12.2 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.3:*:*:*:*:*:*:* | 2.12.3 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.4:*:*:*:*:*:*:* | 2.12.4 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.5:*:*:*:*:*:*:* | 2.12.5 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.6:*:*:*:*:*:*:* | 2.12.6 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.7:*:*:*:*:*:*:* | 2.12.7 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.8:*:*:*:*:*:*:* | 2.12.8 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.9:*:*:*:*:*:*:* | 2.12.9 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.10:*:*:*:*:*:*:* | 2.12.10 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.11:*:*:*:*:*:*:* | 2.12.11 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.12:*:*:*:*:*:*:* | 2.12.12 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.13:*:*:*:*:*:*:* | 2.12.13 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.14:*:*:*:*:*:*:* | 2.12.14 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.15:*:*:*:*:*:*:* | 2.12.15 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.16:*:*:*:*:*:*:* | 2.12.16 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.17:*:*:*:*:*:*:* | 2.12.17 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.12.18:*:*:*:*:*:*:* | 2.12.18 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.0:*:*:*:*:*:*:* | 2.13.0 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.0:a1:*:*:*:*:*:* | 2.13.0 a1 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.0:a2:*:*:*:*:*:* | 2.13.0 a2 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.0:a3:*:*:*:*:*:* | 2.13.0 a3 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.0:a4:*:*:*:*:*:* | 2.13.0 a4 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.0:b1:*:*:*:*:*:* | 2.13.0 b1 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.0:c1:*:*:*:*:*:* | 2.13.0 c1 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.1:*:*:*:*:*:*:* | 2.13.1 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.2:*:*:*:*:*:*:* | 2.13.2 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.3:*:*:*:*:*:*:* | 2.13.3 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.4:*:*:*:*:*:*:* | 2.13.4 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.5:*:*:*:*:*:*:* | 2.13.5 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.6:*:*:*:*:*:*:* | 2.13.6 | Vulnerable | zopefoundation |
| cpe:2.3:a:zope:zope:2.13.7:*:*:*:*:*:*:* | 2.13.7 | Vulnerable | zopefoundation |
- cpe:2.3:a:plone:plone:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.1.3:*:*:*:*:*:*:* Versions 3.1.3 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.1.4:*:*:*:*:*:*:* Versions 3.1.4 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.1.5.1:*:*:*:*:*:*:* Versions 3.1.5.1 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.1.6:*:*:*:*:*:*:* Versions 3.1.6 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.1.7:*:*:*:*:*:*:* Versions 3.1.7 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·plone
- cpe:2.3:a:plone:plone:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0.6.1:*:*:*:*:*:*:* Versions 4.0.6.1 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·plone
- cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·plone
- cpe:2.3:a:zope:zope:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.0:a1:*:*:*:*:*:* Versions 2.12.0 a1 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.0:a2:*:*:*:*:*:* Versions 2.12.0 a2 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.0:a3:*:*:*:*:*:* Versions 2.12.0 a3 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.0:a4:*:*:*:*:*:* Versions 2.12.0 a4 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.0:b1:*:*:*:*:*:* Versions 2.12.0 b1 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.0:b2:*:*:*:*:*:* Versions 2.12.0 b2 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.0:b3:*:*:*:*:*:* Versions 2.12.0 b3 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.0:b4:*:*:*:*:*:* Versions 2.12.0 b4 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.1:*:*:*:*:*:*:* Versions 2.12.1 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.2:*:*:*:*:*:*:* Versions 2.12.2 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.3:*:*:*:*:*:*:* Versions 2.12.3 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.4:*:*:*:*:*:*:* Versions 2.12.4 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.5:*:*:*:*:*:*:* Versions 2.12.5 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.6:*:*:*:*:*:*:* Versions 2.12.6 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.7:*:*:*:*:*:*:* Versions 2.12.7 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.8:*:*:*:*:*:*:* Versions 2.12.8 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.9:*:*:*:*:*:*:* Versions 2.12.9 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.10:*:*:*:*:*:*:* Versions 2.12.10 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.11:*:*:*:*:*:*:* Versions 2.12.11 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.12:*:*:*:*:*:*:* Versions 2.12.12 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.13:*:*:*:*:*:*:* Versions 2.12.13 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.14:*:*:*:*:*:*:* Versions 2.12.14 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.15:*:*:*:*:*:*:* Versions 2.12.15 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.16:*:*:*:*:*:*:* Versions 2.12.16 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.17:*:*:*:*:*:*:* Versions 2.12.17 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.12.18:*:*:*:*:*:*:* Versions 2.12.18 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.0:*:*:*:*:*:*:* Versions 2.13.0 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.0:a1:*:*:*:*:*:* Versions 2.13.0 a1 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.0:a2:*:*:*:*:*:* Versions 2.13.0 a2 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.0:a3:*:*:*:*:*:* Versions 2.13.0 a3 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.0:a4:*:*:*:*:*:* Versions 2.13.0 a4 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.0:b1:*:*:*:*:*:* Versions 2.13.0 b1 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.0:c1:*:*:*:*:*:* Versions 2.13.0 c1 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.1:*:*:*:*:*:*:* Versions 2.13.1 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.2:*:*:*:*:*:*:* Versions 2.13.2 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.3:*:*:*:*:*:*:* Versions 2.13.3 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.4:*:*:*:*:*:*:* Versions 2.13.4 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.5:*:*:*:*:*:*:* Versions 2.13.5 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.6:*:*:*:*:*:*:* Versions 2.13.6 Vulnerable ·zopefoundation
- cpe:2.3:a:zope:zope:2.13.7:*:*:*:*:*:*:* Versions 2.13.7 Vulnerable ·zopefoundation
Remediation
- Fix · GHSA-p6h9-hpcg-c6gm Plone (PyPI) Fixed in 3.3.6 Advisory →
- Fix · GHSA-p6h9-hpcg-c6gm Zope2 (PyPI) Fixed in 2.12.19 Advisory →
- Fix · GHSA-p6h9-hpcg-c6gm Zope2 (PyPI) Fixed in 2.13.8 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 2 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
Timeline
- 2026-10-02 Threatist record created from CVE-2011-2528
- 2026-10-03 Alias added: GHSA-p6h9-hpcg-c6gm
References
Patch 6
- http://plone.org/products/plone/security/advisories/20110622
- https://bugzilla.redhat.com/show_bug.cgi?id=718824
- [oss-security] 20110712 Re: CVE request: plone privilege escalation flaw
- [zone-announce] 20110628 Security Hotfix 20110622 released
- http://plone.org/products/plone-hotfix/releases/20110622
- [oss-security] 20110704 CVE request: plone privilege escalation flaw
Other 6
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-25.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-32.yaml
- https://plone.org/products/plone-hotfix/releases/20110622
- https://plone.org/products/plone/security/advisories/20110622
- https://www.openwall.com/lists/oss-security/2011/07/04/6
- https://www.openwall.com/lists/oss-security/2011/07/12/9
Sources
- CVE-2011-2528 · CVE Program
- CVE-2011-2528 · NVD
- FIRST EPSS
- GHSA-p6h9-hpcg-c6gm · GitHub Advisory Database · CC BY 4.0
- CVE-2011-2528 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences