Plone CMS Use of Externally-Controlled Format String Vulnerability - CVE-2017-5524 - Vulnerability Database

Plone CMS Use of Externally-Controlled Format String Vulnerability - CVE-2017-5524

Medium

Reference: CVE-2017-5524

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-5524

Title: Plone CMS Use of Externally-Controlled Format String Vulnerability

Overview:

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method.