Description
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | >= 4.0, <= 5.2.1 | — | GHSA-hhmf-7rgg-gcw5 |
| PyPI | plone | >= 4.0, < 5.2.2 | 5.2.2 | PYSEC-2020-88 |