high8.8
CVE-2020-7939
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries.
Impact
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plone | Plone | from 4.0.0 through 5.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2020/01/24/1
- https://plone.org/security/hotfix/20200121
- https://plone.org/security/hotfix/20200121/sql-injection-in-dtml-or-in-connection-objects
- https://www.openwall.com/lists/oss-security/2020/01/22/1
- http://www.openwall.com/lists/oss-security/2020/01/24/1
- https://plone.org/security/hotfix/20200121
- https://plone.org/security/hotfix/20200121/sql-injection-in-dtml-or-in-connection-objects
- https://www.openwall.com/lists/oss-security/2020/01/22/1