Description
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | >= 3.3, < 4.0a1 | 4.0a1 | GHSA-fq9r-8jpm-2222 |
High · 7.5
CVE-2015-7318
EUVD-2017-0087GHSA-fq9r-8jpm-2222PYSEC-2017-54
Plone Header Injection
Published Sep 25, 2017 · Updated Aug 6, 2024 · Assigned by mitre