Description

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access.

Remediation

References

CVE-2012-5506

Related Vulnerabilities

WordPress Plugin Lightweight Accordion Cross-Site Scripting (1.5.14)

WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.13)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11876)

WordPress Plugin Link Juice Keeper Cross-Site Scripting (2.0.2)

WordPress Plugin Simple Page Ordering Cross-Site Scripting (2.2.1)

Severity

Medium

Classification

CVE-2012-5506

Tags

Missing Update Known Vulnerabilities