Vulnerability in Plone

CVE-2013-4188

traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to "retrieving information for certain resources."

EPSS: 0.013 (68.6th percentile) — read the EPSS interpretation.

Affected products

  • Plone — versions 4.3, 4.3.1, 2.1
  • N/a — versions n/a

Weakness classification (CWE)

References