Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-5492

Fixed upstream EPSS 1%

uid_catalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL.

Published 2014-09-30 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone4.2.3
PyPIplone4.3b1