Skip to content
OpenAdvisories
Critical DSA-1405-1 1 CVE

zope-cmfplone - arbitrary code

Published Nov 9, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 zope-cmfplone 2.5.1-4etch1

Vulnerabilities 1

  • Critical 9.8
    CVE-2007-5741

    Plone Arbitrary Code Execution via Unsafe Handling of Pickles

    Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

    plone PyPI