| Package | Affected versions | Patched versions |
|---|---|---|
| plone | ≥ 3.3, < 4.3.3 | 4.3.3 |
| products-cmfplone | ≥ 3.3, < 4.3.3 | 4.3.3 |
| plone | = 3.3= 3.3.1= 3.3.2= 3.3.3= 3.3.4= 3.3.5= 3.3.6= 4.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.7= 4.0.9= 4.1= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 4.1.6= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.3= 4.3.1= 4.3.2 |
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free