Skip to content
OpenAdvisories
Medium · 5.3 CVE-2013-7060 EUVD-2014-0083GHSA-rg52-j87w-pf83PYSEC-2014-65PYSEC-2014-67

Plone Filesystem path information leak

Published May 2, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Package: plone Package: products-cmfplone Ecosystem: PyPI

Description

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI plone >= 3.3, < 4.3.3 4.3.3 GHSA-rg52-j87w-pf83
PyPI products-cmfplone >= 3.3, < 4.3.3 4.3.3 GHSA-rg52-j87w-pf83

References