Description
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Fastest Cache Arbitrary File Deletion (0.8.9.0)
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-25143)
WordPress Plugin Mz-jajak 'id' Parameter SQL Injection (2.1)
MySQL CVE-2022-21279 Vulnerability (CVE-2022-21279)
XWikiplatform Improper Input Validation Vulnerability (CVE-2025-54385)