PyPI/plone-app-contenttypes: medium 6.5
plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
Action: Upgrade plone-app-contenttypes to 3.0.12 or later.
pip install plone-app-contenttypes==5.0.1pip install plone-app-contenttypes==4.0.10pip install plone-app-contenttypes==3.0.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.1 | - |
| 4.0.0 | 4.0.10 | - |
| 0 | 3.0.12 | - |
Fixed versions
| 5.0.1 | 4.0.10 | 3.0.12 |
Sources
- osv: GHSA-8pcw-h6w9-h46g
- https://github.com/plone/plone.app.contenttypes/security/advisories/GHSA-8pcw-h6w9-h46g
- https://github.com/plone/plone.app.contenttypes/pull/744
- https://github.com/plone/plone.app.contenttypes/commit/13dc98a578341aac24a1e65fd9bc7ac8a07d168a
- https://github.com/plone/plone.app.contenttypes/commit/21bae6ebe424689eeac9a5884fc0da35f4944e63
- https://github.com/plone/plone.app.contenttypes/commit/639c0619f371df578e69ec94e5ca98e60fd6ed58
- https://github.com/plone/plone.app.contenttypes/commit/7bb03e8ec6c6bd0e645f445b0755e85a51afb158
- https://github.com/plone/plone.app.contenttypes/commit/bed1547d4f8b1fc995f2c76f30ba5f20276a8ad6
- https://github.com/plone/plone.app.contenttypes
- https://github.com/plone/plone.app.contenttypes/releases/tag/3.0.12
- https://github.com/plone/plone.app.contenttypes/releases/tag/4.0.10
- https://github.com/plone/plone.app.contenttypes/releases/tag/5.0.1
published · modified · JSON