Skip to content
OpenAdvisories

Package · PyPI

plone

101 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-22889 Public exploit

    Phone information disclosure vulnerability

    Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.

    plone PyPI
  • Medium —
    CVE-2006-1711 Public exploit

    Plone allows remote users to modify arbitrary portraits

    Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.

    plone PyPI