CVE-2012-5497
Fixed in a distro release EPSS 2%
membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.2.3 |
| PyPI | plone | 4.3b1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel cluster 5 | conga | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | conga-debuginfo | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | luci | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | ricci | 0:0.12.2-81.el5 |