p PatchFirst

CVE-2011-4030

CVE-2011-4030

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

EPSS 2.0% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • plone PyPI

    Versions
    • 4.0
    • 4.0.1
    • 4.0.2
    • 4.0.3
    • 4.0.4
    • 4.0.5
    • 4.0.6
    • 4.0.7
    • 4.0.8
    • 4.0.9
    Affected ranges
    • ECOSYSTEM: ≥ 4.0, < 4.0.10

    Update to 4.0.10

  • plone PyPI

    Versions
    • 4.1
    Affected ranges
    • ECOSYSTEM: ≥ 4.1, < 4.1.1

    Update to 4.1.1

  • plone PyPI

    Versions
    • 4.2a1
    • 4.2a2
    Affected ranges
    • ECOSYSTEM: ≥ 4.2a1, < 4.2a3

    Update to 4.2a3

  • plone PyPI

    Versions
    • 4.0
    • 4.0.1
    • 4.0.2
    • 4.0.3
    • 4.0.4
    • 4.0.5
    • 4.0.6
    • 4.0.7
    • 4.0.8
    • 4.0.9
    • 4.1
    • 4.2a1
    • 4.2a2
    Affected ranges
    • ECOSYSTEM: ≥ 4.0, < 4.0.10 ∪ ≥ 4.1, < 4.1.1 ∪ ≥ 4.2a1, < 4.2a3

    Update to 4.0.10; Update to 4.1.1; Update to 4.2a3

Original sources

Check your server →