CVE-2012-5500
Fixed in a distro release EPSS 1%
The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.2.3 |
| PyPI | plone | 4.3b1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel cluster 5 | conga | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | conga-debuginfo | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | luci | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | ricci | 0:0.12.2-81.el5 |