En resumen
- CVE-2024-0669 es una vulnerabilidad ALTO (CVSS 7.1) que afecta a plone, plone (plone).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.29%, mayor que el 21.8% de las vulnerabilidades.
- Solución: actualizar a 6.0.7 o posterior.
| Package | Affected versions | Patched versions |
|---|
| plone PyPI | < 6.0.7
| 6.0.7
|
| plone | < 6.0.7
| 6.0.7
|
Description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
NVD description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free