GitHub Advisoryadvisory · PyPI

GHSA-rg52-j87w-pf83 Plone Filesystem path information leak

MEDIUM Published 2022-05-17 Modified 2024-10-15 Official page ↗
Aliases
CVE-2013-7060
Ecosystem
PyPI
Packages
Plone, Products.CMFPlone
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200
Reviewed
2023-08-29

Affected packages

• PyPI Plone: >= 3.3, < 4.3.3 → fixed in 4.3.3 • PyPI Products.CMFPlone: >= 3.3, < 4.3.3 → fixed in 4.3.3

Description

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.

Related

Alias · CVE (1)

  • CVE-2013-7060 Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References