Description

Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.

Remediation

References

CVE-2013-7061

Related Vulnerabilities

WordPress Plugin article2pdf Multiple Vulnerabilities (0.27)

MySQL CVE-2024-20967 Vulnerability (CVE-2024-20967)

WordPress Plugin Side Menu Lite-add sticky fixed buttons SQL Injection (2.2.1)

WordPress Plugin WP Symposium Cross-Site Scripting (15.8.1)

Oracle Database Server CVE-2016-5555 Vulnerability (CVE-2016-5555)

Severity

Medium

Classification

CVE-2013-7061 CWE-264

Tags

Missing Update Known Vulnerabilities