PyPI/plone CVE-2007-5741: critical 9.8, EPSS 2.21%
Plone Arbitrary Code Execution via Unsafe Handling of Pickles
Action: Upgrade plone to 2.5.5 or later.
pip install plone==2.5.5pip install plone==3.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5 | 2.5.5 | - |
| 3.0 | 3.0.3 | - |
Fixed versions
| 2.5.5 | 3.0.3 |
Sources
- osv: GHSA-hf26-vvmx-x8c8
- https://nvd.nist.gov/vuln/detail/CVE-2007-5741
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38288
- https://github.com/plone/Plone
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2007-4.yaml
- https://web.archive.org/web/20080507055819/https://plone.org/about/security/advisories/cve-2007-5741
- https://web.archive.org/web/20080517012557/http://www.securityfocus.com/bid/26354
- https://web.archive.org/web/20080906150436/http://www.securityfocus.com/archive/1/483343/100/0/threaded
- http://plone.org/about/security/advisories/cve-2007-5741
- http://www.debian.org/security/2007/dsa-1405
CVE-2007-5741 · published · modified · JSON