Description

The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them.

Remediation

References

CVE-2024-23756

Related Vulnerabilities

WordPress 6.5.x Multiple Vulnerabilities (6.5 - 6.5.4)

WebLogic CVE-2020-2549 Vulnerability (CVE-2020-2549)

Django URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-14574)

WordPress Plugin WP-Spreadplugin Multiple Vulnerabilities (4.4.4)

WordPress Plugin Beer Recipes Cross-Site Scripting (1.0)

Severity

High

Classification

CVE-2024-23756 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities