CVE-2012-5487 in Plone

Riassunto

di MITRE

The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 24/10/2012
• Divulgazione: 30/09/2014
• Moderazione: accettato
• Voce: VDB-71669
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 8.8 (VulDB)
• EPSS: 0.01695
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-5487
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-5487
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-5487/