← back
CVE-2007-5741

CVE-2007-5741

EPSS 2.2%
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/42071http://osvdb.org/42072http://plone.org/about/security/advisories/cve-2007-5741http://secunia.com/advisories/27530http://secunia.com/advisories/27559https://exchange.xforce.ibmcloud.com/vulnerabilities/38288http://www.debian.org/security/2007/dsa-1405http://www.securityfocus.com/archive/1/483343/100/0/threadedhttp://www.securityfocus.com/bid/26354http://www.vupen.com/english/advisories/2007/3754