{"action":"Upgrade plone to 5.0a1 or later.","affected":[{"fixed":"5.0a1","introduced":"0"}],"component":"plone","cve_ids":["CVE-2015-7293"],"ecosystem":"PyPI","epss":0.03042,"exploited":false,"fixed_versions":["5.0a1"],"ghsa_id":"GHSA-p3qm-44cf-f8qx","id":"tcs_01M5KFS6FV9PAT9B3GASBTJ7JP","modified_at":"2024-10-18T16:04:32.126813Z","published_at":"2022-05-17T00:34:49Z","references":["https://osv.dev/vulnerability/GHSA-p3qm-44cf-f8qx","https://nvd.nist.gov/vuln/detail/CVE-2015-7293","https://github.com/plone/Plone","https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-51.yaml","https://plone.org/security/hotfix/20151006","https://pypi.python.org/pypi/plone4.csrffixes","https://www.exploit-db.com/exploits/38411","http://hyp3rlinx.altervista.org/advisories/AS-ZOPE-CSRF.txt","http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-p3qm-44cf-f8qx","url":"https://osv.dev/vulnerability/GHSA-p3qm-44cf-f8qx"}],"summary":"Plone vulnerable to cross-site request forgery"}