Description

Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors.

Remediation

References

CVE-2016-4041

Related Vulnerabilities

WordPress Plugin Featured Comments Cross-Site Request Forgery (1.2.4)

PostgreSQL Other Vulnerability (CVE-2007-0555)

Oracle JRE CVE-2017-10295 Vulnerability (CVE-2017-10295)

XWikiplatform Missing Authorization Vulnerability (CVE-2024-31983)

WordPress Plugin ULTIMATE VIDEO GALLERY Cross-Site Scripting (1.4)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2016-4041