CVE-2017-5524
Fixed upstream EPSS 2%
Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.3.12 |
| PyPI | plone | 5.1b1 |
| PyPI | plone | 5.0.7 |