CVE-2012-5487
Published
CVSS v3
N/A
CVSS v2
8.5
HIGH
Affected
1
PROJECT
Description
The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.
GitHub