Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.

Remediation

References

CVE-2015-7293

Related Vulnerabilities

WordPress Plugin Contact Form Email Multiple Vulnerabilities (1.2.65)

Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0508)

ownCloud Credentials Management Errors Vulnerability (CVE-2012-5607)

Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-7989)

WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Directory Traversal (4.9.9)

Severity

High

Classification

CVE-2015-7293 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities