GitHub Advisoryadvisory · PyPI
GHSA-3v28-9jjp-4g5w Plone Privilege Escalation Vulnerability
CRITICAL
Official page ↗
- Aliases
- CVE-2011-0720
- Ecosystem
- PyPI
- Packages
- Plone
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Reviewed
- 2024-05-01
Affected packages
• PyPI Plone: >= 2.5, < 4.0.4 → fixed in 4.0.4
Description
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
Related
Alias · CVE (1)
- CVE-2011-0720 Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2011-0720 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65099 web
- https://github.com/plone/Plone package
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-13.yaml web
- https://plone.org/products/plone-hotfix/releases/CVE-2011-0720/logchecker.py web
- https://seclists.org/fulldisclosure/2011/Apr/293 web
- https://web.archive.org/web/20110505051314/http://secunia.com/advisories/43914 web
- https://web.archive.org/web/20110826134658/http://secunia.com/advisories/43146 web
- https://web.archive.org/web/20200229153953/http://www.securityfocus.com/bid/46102 web
- http://osvdb.org/70753 web
- http://plone.org/products/plone/security/advisories/cve-2011-0720 web
- http://www.redhat.com/support/errata/RHSA-2011-0393.html web
- http://www.redhat.com/support/errata/RHSA-2011-0394.html web