Skip to content
OpenAdvisories
Critical DSA-1405-2 1 CVE

zope-cmfplone - arbitrary code

Published Nov 11, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 zope-cmfplone 2.5.1-4etch2

Vulnerabilities 1

  • Critical 9.8
    CVE-2007-5741

    Plone Arbitrary Code Execution via Unsafe Handling of Pickles

    Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

    plone PyPI