CVE-2011-4462 in Plone
Сводка (Английский)
Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Резервировать
17.11.2011
Раскрытие
29.12.2011
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 59847 | Plone эскалация привилегий | 20 | Не определено | Не определено | CVE-2011-4462 |