Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. The problem has been patched in versions 16.34.0, 17.22.1, 18.24.0, and 19.0.0-alpha.4. To mitigate downtime, have setup automatically restart processes that quit with an error.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| @plone/volto(npm) | 0 | 16.34.0 | N/A |
| @plone/volto(npm) | 17.0.0 | 17.22.1 | N/A |
| @plone/volto(npm) | 18.0.0 | 18.24.0 | N/A |
| @plone/volto(npm) | 19.0.0-alpha.1 | 19.0.0-alpha.4 | N/A |
CVSS Metrics
