p PatchFirst

CVE-2008-0164

CVE-2008-0164

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page.

CVSS 8.7 · High · EPSS 0.6% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • plone PyPI

    Affected ranges
    • ECOSYSTEM: < 3.1

    Update to 3.1

Original sources

Check your server →