Summaryinfo

A vulnerability was found in Plone up to 1.0.5. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to resource management. This vulnerability is uniquely identified as CVE-2012-5506. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Plone up to 1.0.5 (Content Management System). This issue affects an unknown function. The manipulation with an unknown input leads to a resource management vulnerability. Using CWE to declare the problem leads to CWE-399. Impacted is availability. The summary by CVE is:

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access.

The weakness was disclosed 09/30/2014 (Website). It is possible to read the advisory at plone.org. The identification of this vulnerability is CVE-2012-5506 since 10/24/2012. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 1.0.6 eliminates this vulnerability.

The entries VDB-11635, VDB-71688, VDB-71686 and VDB-71685 are pretty similar. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Content Management System

Name

• Plone

Version

• 1.0.0
• 1.0.1
• 1.0.2
• 1.0.3
• 1.0.4
• 1.0.5

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion