CVE-2016-7135
MEDIUM4.9EPSS 0.70%Plone vulnerable to filesystem information leak
發布日:2022/5/14修改日:2024/10/18
描述
Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a `..` (dot dot) in the path parameter in a getFile action to `Plone/++theme++barceloneta/@@plone.resourceeditor.filemanager-actions`.
受影響套件(2)
- PyPI/plone>= 5.0, < 5.0.7
- PyPI/plone>= 5.0, < 5.0.7, >= 4.2, < 4.3.12
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 4.0 | — | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| osv | CVSS 3.1 | MEDIUM4.9 | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
參考連結(13)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2016-7135
- PATCHhttps://github.com/plone/Plone
- WEBhttp://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
- WEBhttp://seclists.org/fulldisclosure/2016/Oct/80
- WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-58.yaml
- WEBhttps://plone.org/security/hotfix/20160830/filesystem-information-leak
- WEBhttps://pypi.org/project/Products.PloneHotfix20160830
- WEBhttps://web.archive.org/web/20200227230348/http://www.securityfocus.com/bid/92752
- WEBhttps://web.archive.org/web/20201207134911/http://www.securityfocus.com/archive/1/539572/100/0/threaded
- WEBhttp://www.openwall.com/lists/oss-security/2016/09/05/4
- WEBhttp://www.openwall.com/lists/oss-security/2016/09/05/5
- WEBhttp://www.securityfocus.com/archive/1/539572/100/0/threaded
- WEBhttp://www.securityfocus.com/bid/92752