Em resumo
- CVE-2024-0669 é uma vulnerabilidade ALTO (CVSS 7.1) que afeta plone, plone (plone).
- Chance de exploração nos próximos 30 dias (EPSS): 0.29%, maior que 21.8% das vulnerabilidades.
- Correção: atualize para 6.0.7 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| plone PyPI | < 6.0.7
| 6.0.7
|
| plone | < 6.0.7
| 6.0.7
|
Description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
NVD description
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free