CVE-2020-7941
Fixed upstream EPSS 2%
A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 5.2.2 |
| PyPI | plone-app-contenttypes | 2.1.6 |
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| PyPI | plone |
| PyPI | plone-app-contenttypes |