Description

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Remediation

References

CVE-2011-3587

Related Vulnerabilities

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-12528)

Beego Framework Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-27117)

WordPress Plugin File Groups 'fgid' Parameter SQL Injection (1.1.2)

WordPress Plugin WP SVG Icons Cross-Site Request Forgery (3.2.1)

Resin Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2966)

Severity

Critical

Classification

CVE-2011-3587

Tags

Missing Update Known Vulnerabilities