Skip to content
OpenAdvisories
Medium · 5.3 CVE-2016-4042 EUVD-2017-0089GHSA-v4vj-49m5-wjhwPYSEC-2017-56

Plone vulnerable to unauthorized disclosure of site content

Published Feb 24, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Package: plone Ecosystem: PyPI

Description

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI plone >= 5.0, < 5.0.5 5.0.5 GHSA-v4vj-49m5-wjhw
PyPI plone >= 3.3, < 4.3.10 4.3.10 GHSA-v4vj-49m5-wjhw
PyPI plone >= 3.3, < 5.1a2 5.1a2 PYSEC-2017-56

References