CVE-2020-28734

Published December 30th, 2020

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.

plone/Products.CMFPlone

The core of the Plone content management system

GitHub

307