Skip to content
OpenAdvisories

Package · PyPI

plone-app-contenttypes

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.5
    GHSA-8pcw-h6w9-h46g

    plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length

    ### Impact When creating an Image or File with a very large filename, Plone can become unresponsive. Even if the content loads, it can be hard to edit or delete, because the UI is unwieldy. ### Patches The problem has been patched in `plone.app.contenttypes`.…

    plone-app-contenttypes PyPI
  • Medium 4.3
    GHSA-f7qw-5fgj-247x

    Cross-site Scripting and Open Redirect in plone.app.contenttypes

    ### Impact Plone is vulnerable to reflected cross site scripting and open redirect when an attacker can get a compromised version of the image_view_fullscreen page in a cache, for example in Varnish. The technique is known as cache poisoning. Any later visito…

    plone-app-contenttypes PyPI
  • Critical 9.8
    CVE-2020-7941

    Plone Unauthenticated Write Vulnerability

    A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.

    plone plone-app-contenttypes PyPI