Kurz gesagt
- CVE-2024-0669 ist eine Schwachstelle (HOCH (CVSS 7.1)) in plone, plone (plone).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.29%, höher als bei 21.8% aller Schwachstellen.
- Abhilfe: auf 6.0.7 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| plone PyPI | < 6.0.7
| 6.0.7
|
| plone | < 6.0.7
| 6.0.7
|
Description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
NVD description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free