CVE-2012-5501 in Plone
Summary
at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types via a crafted URL.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
10/24/2012
Disclosure
09/30/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 71682 | Plone Stored access control | 264 | Not defined | Official fix | CVE-2012-5501 |