Skip to content
OpenAdvisories
High · 8.8 CVE-2020-7938 EUVD-2020-0145GHSA-cjg3-q24h-9qwfPYSEC-2020-87PYSEC-2026-2889

Plone Privilege Escallation

Published Jan 23, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: plone Package: plone-restapi Ecosystem: PyPI

Description

plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI plone >= 5.2.0, < 5.2.2 5.2.2 GHSA-cjg3-q24h-9qwf
PyPI plone-restapi < 6.2.1 6.2.1 GHSA-cjg3-q24h-9qwf

References