| Package | Affected versions | Patched versions |
|---|---|---|
| plone | ≥ 3.3, < 4.3.10≥ 4.0, < 5.1a2≥ 5.0, < 5.0.5≥ 5.1a1, < 5.1a2 | 4.3.105.1a25.0.5 |
| plone | = 4.0= 4.0.1= 4.0.10= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.7= 4.0.8= 4.0.9= 4.1= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 4.1.6= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.3= 4.3.1= 4.3.2= 4.3.3= 4.3.4= 4.3.5= 4.3.6= 4.3.7= 4.3.8= 4.3.9= 5.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4 |
Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free