Description

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Remediation

References

CVE-2011-3587

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2000-1206)

Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-43293)

WordPress Plugin SupportFlow Multiple Cross-Site Scripting Vulnerabilities (0.6)

WordPress Plugin Keyword Meta Cross-Site Request Forgery (3.0)

WordPress Other Vulnerability (CVE-2007-3639)

Severity

Critical

Classification

CVE-2011-3587

Tags

Missing Update Known Vulnerabilities