Skip to content
OpenAdvisories

Package · PyPI

plone-restapi

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.3
    GHSA-8rqh-vxpr-x77p

    plone.restapi: Stored XSS by spoofing mime type

    ### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type (`text/x-html-safe`) is the type that signifies "alread…

    plone-restapi PyPI
  • Low 3.7
    GHSA-hc5c-r8m5-2gfh

    plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait

    ### Impact There is a stored cross site scripting vulnerability for SVG images uploaded in user portraits. Note that a page that uses an image tag with an SVG image as source is never vulnerable, even when the SVG image contains malicious code. To exploit the…

    plone-restapi PyPI
  • High 8.8
    CVE-2020-7938

    Plone Privilege Escallation

    plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level.

    plone plone-restapi PyPI