PT-2020-19861
CVE-2020-7939
·
تاريخ النشر
2020-01-23
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Plone versions 4.0 through 5.2.1
Description
The issue allows users to perform unwanted SQL queries due to SQL Injection in DTML or in connection objects. This problem is related to Zope.
Recommendations
For Plone versions 4.0 through 5.2.1, update to a version that contains a fix for this issue to prevent unwanted SQL queries.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾