| Package | Affected versions | Patched versions |
|---|---|---|
| plone | = 5.0rc1≥ 3.3, ≤ 3.3.6≥ 3.3, < 4.0a1≥ 4.0, < 4.1a1≥ 4.0a1, ≤ 4.0.10≥ 4.1, < 4.2a1≥ 4.1a1, ≤ 4.1.6≥ 4.2, < 4.3a1≥ 4.2a1, ≤ 4.2.7≥ 4.3, < 4.3.7≥ 4.3a1, ≤ 4.3.6≥ 5.0a1, < 5.0rc2 | 4.0a14.1a14.2a14.3a14.3.75.0rc2 |
| products-cmfplone | ≥ 3.3.0, < 4.3.7≥ 5.0a1, < 5.0rc2 | 4.3.75.0rc2 |
| plone | = 3.3= 3.3.1= 3.3.2= 3.3.3= 3.3.4= 3.3.5= 3.3.6= 4.0= 4.0.1= 4.0.10= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.7= 4.0.8= 4.0.9= 4.1= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 4.1.6= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.3= 4.3.1= 4.3.2= 4.3.3= 4.3.4= 4.3.5= 4.3.6= 5.0 |
Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free