MEDIUM🇵🇱 Wersja polska

CVE-2024-23055

CVSS 6.1v3.1pub. 2024-01-25upd. 2026-07-09

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software allows for remote code execution via improper validation of input by the HOST headers.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

  • Plone Docker Official Image

    APP
    Plone
    5.2.13
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEContainer
CWE
References

Related vulnerabilities

CVE-2024-23054CRITICAL9.8PL ✓same product

RCE w Plone Docker Official Image — brakujący pakiet npm (dependency confusion)

CVE-2021-33509CRITICAL9.9PL ✓same vendor

Plone: zapis dowolnych plików przez transform ReStructuredText

CVE-2020-35190CRITICAL9.8PL ✓same vendor

Puste hasło roota w oficjalnych obrazach Docker Plone (Alpine)

CVE-2020-7941CRITICAL9.8PL ✓same vendor

Privilege escalation w Plone — nadpisywanie treści bez uprawnień zapisu

CVE-2024-22889HIGH7.5same vendor

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted o...