CVE-2013-7060

Advisory

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.


MLIST:[oss-security] 20131210 CVE request for Plone: http://www.openwall.com/lists/oss-security/2013/12/10/15
MLIST:[oss-security] 20131211 Re: CVE request for Plone: http://www.openwall.com/lists/oss-security/2013/12/12/3
CONFIRM:https://plone.org/security/20131210/path-leak: https://plone.org/security/20131210/path-leak

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7060
• https://plone.org/security/20131210/path-leak
• http://www.openwall.com/lists/oss-security/2013/12/10/15
• http://www.openwall.com/lists/oss-security/2013/12/12/3