Description

registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.

Remediation

References

CVE-2012-5485

Related Vulnerabilities

SugarCRM Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2019-17316)

Joomla Other Vulnerability (CVE-2006-1029)

WordPress Plugin Facebook for WooCommerce Cross-Site Request Forgery (1.9.14)

Seo Panel Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-22646)

MySQL CVE-2023-22028 Vulnerability (CVE-2023-22028)

Severity

Medium

Classification

CVE-2012-5485 CWE-94

Tags

Missing Update Known Vulnerabilities