What is GHSA-prr5-pfr8-q9f3?

GHSA-prr5-pfr8-q9f3 is a security advisory published by GitHub Security Advisories with High severity. Plone allows remote attackers to read hidden folder contents

Which CVE IDs does GHSA-prr5-pfr8-q9f3 cover?

GHSA-prr5-pfr8-q9f3 covers the following CVE IDs: CVE-2012-5503. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-prr5-pfr8-q9f3?

GHSA-prr5-pfr8-q9f3 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-prr5-pfr8-q9f3?

GHSA-prr5-pfr8-q9f3 affects 2 products, including: pip/Plone:\u003c 4.2.3; pip/Plone:\u003e= 4.3a1, \u003c= 4.3a2.

GHSA-prr5-pfr8-q9f3HighCVSS 7.5

Plone allows remote attackers to read hidden folder contents

Vendor

GitHub Security Advisories

Published

July 23, 2018

Last Modified

October 14, 2024

🔗 CVE IDs covered (1)

CVE-2012-5503 →

📋 Description

ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors.

🎯 Affected products2

pip/Plone:< 4.2.3
pip/Plone:>= 4.3a1, <= 4.3a2

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2012-5503
https://github.com/advisories/GHSA-prr5-pfr8-q9f3
https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
https://plone.org/products/plone-hotfix/releases/20121106
https://plone.org/products/plone/security/advisories/20121106/19
http://www.openwall.com/lists/oss-security/2012/11/10/1
https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-45.yaml