Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4194)

Description

The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.

Remediation

References

CVE-2013-4194

Related Vulnerabilities

XWiki Out-of-bounds Write Vulnerability (CVE-2023-26470)

Joomla! Core 3.x.x Multiple Vulnerabilities (3.4.4 - 3.6.3)

Joomla! Core 3.9.x Cross-Site Request Forgery (3.9.0 - 3.9.22)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-27912)

Oracle Database Server Other Vulnerability (CVE-2005-3445)

Severity

Medium

Classification

CVE-2013-4194 CWE-200