PT-2017-16557
CVE-2017-5524
·
تاريخ النشر
2017-03-23
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 4.0
5.3
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Plone versions 4.x through 4.3.11
Plone versions 5.x through 5.0.6
Description
The issue allows remote attackers to bypass a sandbox protection mechanism and obtain sensitive information. This is achieved by leveraging the Python string format method.
Recommendations
For Plone versions 4.x through 4.3.11, update to a version later than 4.3.11 to resolve the issue.
For Plone versions 5.x through 5.0.6, update to a version later than 5.0.6 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾