Description

traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to "retrieving information for certain resources."

Remediation

References

CVE-2013-4188

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1407)

WordPress Plugin CMS Tree Page View Security Bypass (1.3.4)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3818)

WordPress Plugin Loginizer SQL Injection (1.6.3)

PHP Incorrect Conversion between Numeric Types Vulnerability (CVE-2016-3074)

Severity

Medium

Classification

CVE-2013-4188

Tags

Missing Update Known Vulnerabilities