Description

The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.

Remediation

References

CVE-2013-4194

Related Vulnerabilities

MySQL CVE-2018-2590 Vulnerability (CVE-2018-2590)

Oracle Application Server CVE-2008-2614 Vulnerability (CVE-2008-2614)

Apache Tomcat Other Vulnerability (CVE-2001-0917)

WordPress Plugin WP Post to PDF Enhanced Cross-Site Scripting (1.0.5)

Atlassian Jira CVE-2021-26081 Vulnerability (CVE-2021-26081)

Severity

Medium

Classification

CVE-2013-4194 CWE-200

Tags

Missing Update Known Vulnerabilities