{"action":"Upgrade products-cmfplone to 4.3.3 or later.","affected":[{"fixed":"4.3.3","introduced":"3.3"}],"component":"products-cmfplone","cve_ids":["CVE-2013-7061"],"ecosystem":"PyPI","epss":0.01315,"exploited":false,"fixed_versions":["4.3.3"],"ghsa_id":"GHSA-4vr8-r7qr-fpvq","id":"tcs_01M5KEZ69XVAS2PV2D579W60AJ","modified_at":"2024-10-15T17:59:43.500450Z","published_at":"2022-05-17T04:41:00Z","references":["https://osv.dev/vulnerability/GHSA-4vr8-r7qr-fpvq","https://nvd.nist.gov/vuln/detail/CVE-2013-7061","https://github.com/plone/Products.CMFPlone/commit/a6a3e50f759da7e7ca46e50777a35e51f4d8ed48","https://github.com/plone/Products.CMFPlone","https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-66.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/products-cmfplone/PYSEC-2014-68.yaml","https://plone.org/security/20131210/catalogue-exposure","https://pypi.org/project/Products.PloneHotfix20131210","http://www.openwall.com/lists/oss-security/2013/12/10/15","http://www.openwall.com/lists/oss-security/2013/12/12/3"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-4vr8-r7qr-fpvq#PyPI/products-cmfplone","url":"https://osv.dev/vulnerability/GHSA-4vr8-r7qr-fpvq"}],"summary":"Plone Privilege escalation through exposed underlying API"}