Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-5489
6.5
MEDIUMCVSS v2
Published
September 30, 2014
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.
zopefoundation/Zope
GitHubZope is an open-source web application server.
GitHubZope is an open-source web application server.= 2.8.8, = 2.10.8, = 2.7.0, = 2.13.9, = 2.11.1, = 2.11.3, = 2.9.2, = 2.13.0, = 2.7.6, = 2.13.5, = 2.13.4, = 2.13.3, = 2.7.3, = 2.7.4, = 2.7.5, = 2.13.7, = 2.13.2, = 2.9.6, = 2.11.0, = 2.11.2, = 2.8.6, = 2.9.4, <= 2.13.10, = 2.13.8, = 2.13.1, = 2.9.5, = 2.9.7, = 2.13.6, = 2.5.1, = 2.6.4, = 2.7.8, = 2.8.4, = 2.9.3, = 2.10.3, = 2.6.1, = 2.7.7, = 2.8.1NVD