Description

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "go_back."

Remediation

References

CVE-2012-5495

Related Vulnerabilities

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3009)

Plone CMS CVE-2011-3587 Vulnerability (CVE-2011-3587)

WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-13292)

phpList Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-3188)

Atlassian Jira Observable Discrepancy Vulnerability (CVE-2020-4028)

Severity

Medium

Classification

CVE-2012-5495 CWE-94

Tags

Missing Update Known Vulnerabilities