Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2012-5493

gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.

PublishedSep 30, 2014, 14:55

Published Bysecalert@redhat.com

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

Plone(PyPI)04.2.3N/A

Plone(PyPI)4.3a04.3b1N/A

References

http://www.openwall.com/lists/oss-security/2012/11/10/1
https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
https://plone.org/products/plone-hotfix/releases/20121106
https://plone.org/products/plone/security/advisories/20121106/09

Weakness Type

CWE-94

CVSS Metrics

Base Score

8.5

Vector String

AV:N/AC:M/Au:S/C:C/I:C/A:C

Base SeverityUnknown

Version

2.0

Attack Vector (AV)