CVE-2013-7061

Fixed upstream EPSS 1%

Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.

Published 2014-05-02 · CVE record · OSV

Products: plone

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	plone	4.3.3
PyPI	products-cmfplone	4.3.3