PyPI/plone CVE-2013-7061: medium 4.9, EPSS 1.31%

Plone Privilege escalation through exposed underlying API

Action: Upgrade plone to 4.3.3 or later.

pip install plone==4.3.3

Affected

Fixed versions

Sources

• osv: GHSA-4vr8-r7qr-fpvq
• https://nvd.nist.gov/vuln/detail/CVE-2013-7061
• https://github.com/plone/Products.CMFPlone/commit/a6a3e50f759da7e7ca46e50777a35e51f4d8ed48
• https://github.com/plone/Products.CMFPlone
• https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-66.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/products-cmfplone/PYSEC-2014-68.yaml
• https://plone.org/security/20131210/catalogue-exposure
• https://pypi.org/project/Products.PloneHotfix20131210
• http://www.openwall.com/lists/oss-security/2013/12/10/15
• http://www.openwall.com/lists/oss-security/2013/12/12/3

CVE-2013-7061 · published 2022-05-17T04:41:00Z · modified 2024-10-15T17:59:43.500450Z · JSON