PT-2017-16557
CVE-2017-5524
·
Published
2017-03-23
·
Updated
2019-10-03
Description by
CVSS 4.0
5.3
MediumMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Plone versions 4.x through 4.3.11
Plone versions 5.x through 5.0.6
Description
The issue allows remote attackers to bypass a sandbox protection mechanism and obtain sensitive information. This is achieved by leveraging the Python string format method.
Recommendations
For Plone versions 4.x through 4.3.11, update to a version later than 4.3.11 to resolve the issue.
For Plone versions 5.x through 5.0.6, update to a version later than 5.0.6 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾