Description

Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

Remediation

References

CVE-2011-4462

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-2005-2678)

Internet Information Services Other Vulnerability (CVE-2002-0075)

WordPress Plugin Redirection for Contact Form 7 Multiple Vulnerabilities (2.3.3)

PHP Improper Input Validation Vulnerability (CVE-2016-7417)

WordPress Plugin Ultimeter Security Bypass (1.9.2)

Severity

Medium

Classification

CVE-2011-4462 CWE-20

Tags

Missing Update Known Vulnerabilities