plone@6.0.0rc2 vulnerabilities

The Plone Content Management System

Direct Vulnerabilities

Known vulnerabilities in the plone package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Information Exposure

Plone is an user friendly and extensible Content Management System running on top of Python and Zope.

Affected versions of this package are vulnerable to Information Exposure due to incorrect access control. An attacker can view and list all files hosted on the website by sending a crafted request.

How to fix Information Exposure?

There is no fixed version for Plone.

[0,)