En bref
- CVE-2024-0669 est une vulnérabilité ÉLEVÉE (CVSS 7.1) touchant plone, plone (plone).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.29%, plus élevée que 21.8% des vulnérabilités.
- Correctif : mettre à jour vers 6.0.7 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| plone PyPI | < 6.0.7
| 6.0.7
|
| plone | < 6.0.7
| 6.0.7
|
Description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
NVD description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free