CVE-2007-5741 in Plone

Summary

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 10/31/2007
• Disclosure: 11/07/2007
• Moderation: VulDB entry created
• Entries: VDB-39596
• CPE: ready
• CWE: CWE-94 (Confirmed)
• CVSS: 7.3
• EPSS: 0.03610
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-5741
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-5741
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-5741/