Description (CNA)
Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html
- https://www.exploit-db.com/exploits/38411/
- https://plone.org/security/hotfix/20151006
- https://pypi.python.org/pypi/plone4.csrffixes
ADP enrichment
No English description supplied.