Description

(1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).

Remediation

References

CVE-2013-4199

Related Vulnerabilities

Ruby Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-6914)

Moodle DEPRECATED: Code Vulnerability (CVE-2015-2270)

WordPress Plugin Video Player Unspecified Vulnerability (1.1.4)

WordPress Plugin WP Statistics Cross-Site Scripting (12.6.5)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42117)

Severity

Low

Classification

CVE-2013-4199 CWE-20

Tags

Missing Update Known Vulnerabilities