CVE-2012-5488
Fixed in a distro release EPSS 3%
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.2.3 |
| PyPI | plone | 4.3b1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel cluster 5 | conga | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | conga-debuginfo | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | luci | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | ricci | 0:0.12.2-81.el5 |