Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-7939

Fixed upstream EPSS 1%

SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)

Published 2020-01-23 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone5.2.2

Affected upstream, no fix yet

EcosystemPackage
PyPIplone