{"action":"Upgrade plone to 4.3.3 or later.","affected":[{"fixed":"4.3.3","introduced":"3.3"}],"component":"plone","cve_ids":["CVE-2013-7060"],"ecosystem":"PyPI","epss":0.02138,"exploited":false,"fixed_versions":["4.3.3"],"ghsa_id":"GHSA-rg52-j87w-pf83","id":"tcs_01M5KFXYFN290TQMNDM0KF07ZN","modified_at":"2024-10-15T18:01:10.469655Z","published_at":"2022-05-17T04:41:01Z","references":["https://osv.dev/vulnerability/GHSA-rg52-j87w-pf83","https://nvd.nist.gov/vuln/detail/CVE-2013-7060","https://github.com/plone/Plone","https://github.com/plone/Products.CMFPlone/blob/b08a45bc12b1bd42411f1130a487a7a242349ea0/Products/CMFPlone/FactoryTool.py#L272-L274","https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-65.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/products-cmfplone/PYSEC-2014-67.yaml","https://plone.org/security/20131210/path-leak","http://www.openwall.com/lists/oss-security/2013/12/10/15","http://www.openwall.com/lists/oss-security/2013/12/12/3"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rg52-j87w-pf83","url":"https://osv.dev/vulnerability/GHSA-rg52-j87w-pf83"}],"summary":"Plone Filesystem path information leak"}