Plone: community verdicts
2 notable / known-exploited Plone CVEs the community has triaged.
ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Plone CVE, see NVD ↗.
- CVE-2024-23054CRIT 9.8Real · low riskEPSS 2%
An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).
- CVE-2024-23055MED 6.1EPSS 1%
An issue in Plone Docker Official Image 5.2.13 (5221) open-source software allows for remote code execution via improper validation of input by the HOST headers.