PyPI/plone CVE-2008-1396: medium, EPSS 1.14%
Plone credentials stored in session cookie
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.1.7 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hjp5-hv33-q58g
- https://nvd.nist.gov/vuln/detail/CVE-2008-1396
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41421
- https://github.com/plone/Plone
- http://securityreason.com/securityalert/3754
- http://www.procheckup.com/Hacking_Plone_CMS.pdf
- http://www.securityfocus.com/archive/1/489544/100/0/threaded
CVE-2008-1396 · published · modified · JSON