Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: plone Component: Cmfeditions Clear all filters
TI-2011-03558 CVE-2011-4030 · GHSA-pwgm-jvqv-6v8p

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2…

Priority MEDIUM 44

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecifi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01991 Published 2011-10-10 Fixed in 4.0.10, 4.1.1 +1 CWE-264