Patchwire CVEs, their patch status, and feeds to follow them

CVE-2011-4462

Fixed upstream EPSS 3%

Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

Published 2011-12-30 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone4.1.4