GitHub Advisoryadvisory · PyPI
GHSA-p6h9-hpcg-c6gm High severity vulnerability that affects Plone and Zope2
HIGH
Official page ↗
- Aliases
- CVE-2011-2528
- Ecosystem
- PyPI
- Packages
- Plone, Zope2
- Severity
- High
- Reviewed
- 2020-06-16
Affected packages
• PyPI Plone: >= 3.3.2, < 3.3.6 → fixed in 3.3.6
• PyPI Zope2: >= 2.12.0, < 2.12.19 → fixed in 2.12.19
• PyPI Zope2: >= 2.13.0, < 2.13.8 → fixed in 2.13.8
Description
Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.
Related
Alias · CVE (1)
- CVE-2011-2528 Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2)… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2011-2528 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=718824 web
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-25.yaml web
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-32.yaml web
- https://mail.zope.org/pipermail/zope-announce/2011-June/002260.html web
- https://plone.org/products/plone-hotfix/releases/20110622 web
- https://plone.org/products/plone/security/advisories/20110622 web
- https://www.openwall.com/lists/oss-security/2011/07/04/6 web
- https://www.openwall.com/lists/oss-security/2011/07/12/9 web
- http://plone.org/products/plone-hotfix/releases/20110622 web
- http://plone.org/products/plone/security/advisories/20110622 web
- http://secunia.com/advisories/45056 web
- http://secunia.com/advisories/45111 web
- http://www.openwall.com/lists/oss-security/2011/07/04/6 web
- http://www.openwall.com/lists/oss-security/2011/07/12/9 web