CVE-2016-4043
CVE-2016-4043
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.
CVSS 6.9 · Medium · EPSS 1.0% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
plone PyPI
- Versions
- 5.0
- 5.0.1
- 5.0.2
- 5.0.3
- 5.0.4
- 5.0rc1
- 5.0rc2
- 5.0rc3
- Affected ranges
- ECOSYSTEM: ≥ 5.0rc1, ≤ 5.0.4
No fix published
plone PyPI
- Versions
- 5.1a1
No fix published
plone PyPI
- Versions
- 5.0
- 5.0.1
- 5.0.10
- 5.0.2
- 5.0.3
- 5.0.4
- 5.0.5
- 5.0.6
- 5.0.7
- 5.0.8
- 5.0.9
- 5.0rc1
- 5.0rc2
- 5.0rc3
- 5.1a1
- Affected ranges
- ECOSYSTEM: ≥ 5.0rc1, < 5.1a2
Update to 5.1a2