Plone Cms Luki w zabezpieczeniach

Oś czasu

Wersja

5.0.6	8
4.3.11	7
4.3.3	2
4.3.4	2
4.3.5	2

Przeciwdziałanie

Official Fix	12
Temporary Fix	1
Workaround	0
Unavailable	0
Not Defined	3

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	2
Unproven	4
Not Defined	10

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	1
Network	15

Uwierzytelnianie

Not Defined	0
High	0
Low	5
None	11

Interakcja z użytkownikiem

Not Defined	0
Required	9
None	7

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	3
≤6	7
≤7	2
≤8	2
≤9	0
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	4
≤6	7
≤7	3
≤8	0
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	5
≤6	1
≤7	2
≤8	3
≤9	0
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	1
≤7	5
≤8	0
≤9	1
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	7
<2k	6
<5k	3
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	16
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (54): 2.0.5, 2.1.2, 2.1.3, 2.5, 2.5.1, 3, 3.0, 3.0.5, 3.0.6, 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.11, 5, 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0rc1, 5.0rc2, 5.0rc3, 5.1, 5.1.1, 5.1.2, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1a1, 5.1a2, 5.1b2, 5.1b3, 5.1b4, 5.1rc1, 5.1rc2, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 6.0.5

Typ oprogramowania: Content Management System

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2024-01-18	4.9	4.8	Plone CMS URL cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-0669
2023-02-18	6.1	6.1	Plone CMS RSS Feed Portlet information disclosure	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2021-33926
2021-05-21	3.5	3.2	Plone CMS File Upload cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2021-3313
2021-03-24	4.4	4.2	Plone CMS site-controlpanel cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2021-29002
2017-03-23	5.8	5.8	Plone CMS Sandbox format privilege escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-5524
2016-10-12	6.2	6.0	Plone CMS Redirect	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-7137
2016-10-12	5.6	5.5	Plone CMS directory traversal	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-7135
2016-10-12	5.2	5.1	Plone CMS Reflected cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-7140
2016-10-12	5.2	5.1	Plone CMS Reflected cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2016-7139
2016-10-12	5.2	5.1	Plone CMS Reflected cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-7138