CVE-2013-4194
Fixed upstream EPSS 1%
The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.1.1 |
| PyPI | plone | 4.2.6 |
| PyPI | plone | 4.3.2 |