Plone CMS Incorrect Default Permissions Vulnerability - CVE-2024-22889 - Vulnerability Database

Plone CMS Incorrect Default Permissions Vulnerability - CVE-2024-22889

High

Reference: CVE-2024-22889

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-22889

Title: Plone CMS Incorrect Default Permissions Vulnerability

Overview:

Due to incorrect access control in Plone version v6.0.9 remote attackers can view and list all files hosted on the website via sending a crafted request.