Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-5506

Fixed upstream EPSS 2%

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access.

Published 2014-09-30 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone4.2.3
PyPIplone4.3b1