Description

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

Remediation

References

CVE-2011-4030

Related Vulnerabilities

Oracle Database Server CVE-2006-1877 Vulnerability (CVE-2006-1877)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.25)

XWiki Improper Handling of Insufficient Privileges Vulnerability (CVE-2024-21648)

WordPress Plugin AllWebMenus WordPress Menu 'abspath' Parameter Remote File Include (1.1.3)

WordPress Plugin ContentStudio Multiple Vulnerabilities (1.2.5)

Severity

Critical

Classification

CVE-2011-4030 CWE-264

Tags

Missing Update Known Vulnerabilities