CVE-2011-4462
Fixed upstream EPSS 3%
Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.1.4 |