high8.8Public exploit code
CVE-2015-7293
Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zope Management Interface 4.3.7 - Cross-Site Request Forgery2015-10-07 · webapps · python
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plone | Plone | Versions 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5 |
| Zope | Zope Management Interface | through 4.3.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html
- https://plone.org/security/hotfix/20151006
- https://pypi.python.org/pypi/plone4.csrffixes
- https://www.exploit-db.com/exploits/38411/
- http://packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.html
- https://plone.org/security/hotfix/20151006
- https://pypi.python.org/pypi/plone4.csrffixes
- https://www.exploit-db.com/exploits/38411/