CVE-2012-5491
2 advisories.
PyPI/plone CVE-2012-5491: medium 5.3
Plone Information Disclosure
Action: Upgrade plone to 4.2.3 or later.
pip install plone==4.2.3pip install plone==4.3b1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.3 | - |
| 4.3a0 | 4.3b1 | - |
Fixed versions
| 4.2.3 | 4.3b1 |
Sources
- osv: GHSA-f8pg-wp5j-rjxx
- https://nvd.nist.gov/vuln/detail/CVE-2012-5491
- https://github.com/plone/Plone
- https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-33.yaml
- https://plone.org/products/plone-hotfix/releases/20121106
- https://plone.org/products/plone/security/advisories/20121106/07
- http://www.openwall.com/lists/oss-security/2012/11/10/1
CVE-2012-5491 · published · modified · JSON
PyPI/plone CVE-2012-5491: unknown
z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id.
Action: Upgrade plone to 4.2.3 or later.
pip install plone==4.2.3pip install plone==4.3b1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.3 | - |
| 4.3a0 | 4.3b1 | - |
Fixed versions
| 4.2.3 | 4.3b1 |
Sources
- osv: PYSEC-2014-33
- https://plone.org/products/plone/security/advisories/20121106/07
- https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
- http://www.openwall.com/lists/oss-security/2012/11/10/1
- https://plone.org/products/plone-hotfix/releases/20121106
- https://github.com/advisories/GHSA-f8pg-wp5j-rjxx
CVE-2012-5491 · published · modified · JSON