Description

(1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).

Remediation

References

CVE-2013-4199

Related Vulnerabilities

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.9)

Drupal Other Vulnerability (CVE-2015-3232)

Drupal Core 7.x SQL Injection (7.0 - 7.31)

PHP 4.3.0 file disclosure and possible code execution

MySQL CVE-2012-1702 Vulnerability (CVE-2012-1702)

Severity

Low

Classification

CVE-2013-4199 CWE-20

Tags

Missing Update Known Vulnerabilities