Description
The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.
Remediation
References
Related Vulnerabilities
PHP NULL Pointer Dereference Vulnerability (CVE-2018-10548)
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (3.2.6)
OpenSSL Cryptographic Issues Vulnerability (CVE-2011-1945)
WordPress Plugin Woosaleskit Bar Cross-Site Scripting (1.0.0)
Ruby Inadequate Encryption Strength Vulnerability (CVE-2011-4121)