Plone CMS Permissions Privileges and Access Controls Vulnerability - CVE-2012-5498 - Vulnerability Database

Plone CMS Permissions Privileges and Access Controls Vulnerability - CVE-2012-5498

Medium
Reference: CVE-2012-5498
Title: Plone CMS Permissions Privileges and Access Controls Vulnerability
Overview:

queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.