tocsin

CVE-2007-5741

2 advisories.

PyPI/plone CVE-2007-5741: critical 9.8

Plone Arbitrary Code Execution via Unsafe Handling of Pickles

Action: Upgrade plone to 2.5.5 or later.

pip install plone==2.5.5
pip install plone==3.0.3

Affected

introducedfixedlast affected
2.52.5.5-
3.03.0.3-

Fixed versions

2.5.53.0.3

Sources

CVE-2007-5741 · published · modified · JSON

PyPI/plone CVE-2007-5741: unknown

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity modul

Action: Upgrade plone to 2.5.5 or later.

pip install plone==2.5.5
pip install plone==3.0.3

Affected

introducedfixedlast affected
2.52.5.5-
3.03.0.3-

Fixed versions

2.5.53.0.3

Sources

CVE-2007-5741 · published · modified · JSON