Description

queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.

Remediation

References

CVE-2012-5498

Related Vulnerabilities

Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-6932)

Apache HTTP Server CVE-2013-6438 Vulnerability (CVE-2013-6438)

WordPress Plugin WP Scrippets Cross-Site Scripting (1.5.1)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5498)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.3)

Severity

Medium

Classification

CVE-2012-5498 CWE-264

Tags

Missing Update Known Vulnerabilities