CVE-2012-5487 in Plone

Resumen

por MITRE

The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 2012-10-24
• Divulgación: 2014-09-30
• Moderación: aceptado
• Artículo: VDB-71669
• CPE: listo
• CWE: CWE-264 (confirmado)
• CVSS: 8.8 (VulDB)
• EPSS: 0.01695
• KEV: no
• Actividades: muy bajo
• Sector: Lawfirm, Agriculture, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-5487
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-5487
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-5487/