Vulnerabilities

plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based content types.

plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a standard set of portlets that ship with Plone.

plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type.

plone.app.event provides the event content type for Plone.

plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets.

Products.isurlinportal is a replacement for isURLInPortal method in Plone.

Volto is a ReactJS-based frontend for the Plone Content Management System.

Volto is a React based frontend for the Plone Content Management System.

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.

The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them.

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software allows for remote code execution via improper validation of input by the HOST headers.

A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5.

plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc.

plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content.

An issue in Plone CMS v.

Volto is a ReactJS-based frontend for the Plone Content Management System.

Products.ATContentTypes are the core content types for Plone 2.1 - 4.3.

Products.isurlinportal is a replacement for isURLInPortal method in Plone.

In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field.

Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.

Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script.

Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.

Plone though 5.2.4 allows SSRF via the lxml parser.