high7.5
CVE-2024-22889
Phone information disclosure vulnerability
Impact
Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | Plone | <= 6.0.9 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plone | Plone | Version 6.0.9 |