Patchwire CVEs, their patch status, and feeds to follow them

CVE-2013-7060

Fixed upstream EPSS 2%

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.

Published 2014-05-02 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone4.3.3
PyPIproducts-cmfplone4.3.3