In breve
- CVE-2024-0669 è una vulnerabilità ALTO (CVSS 7.1) che riguarda plone, plone (plone).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.29%, superiore al 21.8% delle vulnerabilità.
- Correzione: aggiornare a 6.0.7 o successiva.
| Package | Affected versions | Patched versions |
|---|
| plone PyPI | < 6.0.7
| 6.0.7
|
| plone | < 6.0.7
| 6.0.7
|
Description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
NVD description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free