PyPI/plone CVE-2012-5496: unknown, EPSS 1.62%

kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL.

Action: Upgrade plone to 3.3.6 or later.

pip install plone==3.3.6

Affected

Fixed versions

Sources

• osv: PYSEC-2014-38
• https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
• https://plone.org/products/plone-hotfix/releases/20121106
• http://www.openwall.com/lists/oss-security/2012/11/10/1
• https://plone.org/products/plone/security/advisories/20121106/12
• https://github.com/advisories/GHSA-gx6w-hcw3-5r37

CVE-2012-5496 · published 2014-09-30T14:55:00Z · modified 2026-06-10T17:02:30.767707155Z · JSON