CVE-2012-5503

Advisory

ftp.py in Plone before 4.2.3 and 4.3b1 allows remote attackers to read hidden folder contents via unspecified vectors.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5503
• https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
• https://plone.org/products/plone/security/advisories/20121106/19
• https://plone.org/products/plone-hotfix/releases/20121106
• http://www.openwall.com/lists/oss-security/2012/11/10/1