Description

Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

Remediation

References

CVE-2011-4462

Related Vulnerabilities

Masa CMS Incorrect Authorization Vulnerability (CVE-2022-47002)

WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights Multiple Cross-Site Scripting Vulnerabilities (5.3.3)

Apache Tomcat Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2021-42340)

WordPress Plugin WP-PostRatings Cross-Site Scripting (1.86)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1158)

Severity

Medium

Classification

CVE-2011-4462 CWE-20

Tags

Missing Update Known Vulnerabilities