CVE-2020-7941 in Plone

Sumário

de MITRE

A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 23/01/2020
• Moderação: aceite
• Entrada: VDB-149309
• CPE: pronto
• CWE: CWE-269 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.02249
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider, Lawfirm, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7941
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7941
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7941/