Plone allows a user to masquerade as a group

Description

References

• nvd.nist.gov/vuln/detail/CVE-2006-4249 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/30762 · WEB
• plone/Plone · PACKAGE
• pypa/advisory-database · WEB
• pypa/advisory-database · WEB
• plone.org/about/security/advisories/cve-2006-4249 · WEB
• plone.org/products/plone-hotfix/releases/20061031 · WEB
• secunia.com/advisories/23240 · WEB
• securityfocus.com/bid/21460 · WEB
• vupen.com/english/advisories/2006/4878 · WEB
• plone.org/about/security/advisories/cve-2006-4249 · Patch
• GitHub Advisory GHSA-r7j4-82xw-8m9p · ADVISORY

Weitere Schwachstellen in plone

• CVE-2024-22889HOCH 7.5Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a cr…
• CVE-2024-0669HOCH 7.1A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to…
• CVE-2021-33926HOCH 8.8An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3, 5.1b2, 5.1a2, 5.1a1, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5…
• CVE-2021-35959MITTEL 5.4In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT t…
• CVE-2021-33513MITTEL 5.4Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.