What is GHSA-p3qm-44cf-f8qx?

GHSA-p3qm-44cf-f8qx is a security advisory published by GitHub Security Advisories with High severity. Plone vulnerable to cross-site request forgery

Which CVE IDs does GHSA-p3qm-44cf-f8qx cover?

GHSA-p3qm-44cf-f8qx covers the following CVE IDs: CVE-2015-7293. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p3qm-44cf-f8qx?

GHSA-p3qm-44cf-f8qx has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-p3qm-44cf-f8qx?

GHSA-p3qm-44cf-f8qx affects 1 product, including: pip/Plone:\u003c 5.0a1.

GHSA-p3qm-44cf-f8qxHighCVSS 8.8

Plone vulnerable to cross-site request forgery

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

October 18, 2024

🔗 CVE IDs covered (1)

CVE-2015-7293 →

📋 Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.

🎯 Affected products1

pip/Plone:< 5.0a1

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2015-7293
https://plone.org/security/hotfix/20151006
https://pypi.python.org/pypi/plone4.csrffixes
http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html
https://www.exploit-db.com/exploits/38411
http://hyp3rlinx.altervista.org/advisories/AS-ZOPE-CSRF.txt
https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-51.yaml
https://github.com/advisories/GHSA-p3qm-44cf-f8qx