CVE-2013-7061: Medium severity Plone plone vulnerability

Q: What is the severity of CVE-2013-7061?

CVE-2013-7061 is classified as having a medium severity due to its potential for unauthorized information exposure.

Q: How do I fix CVE-2013-7061?

To fix CVE-2013-7061, upgrade Plone to version 4.3.3 or higher.

Q: Which versions of Plone are affected by CVE-2013-7061?

CVE-2013-7061 affects Plone versions from 3.3 through 4.3.2.

Q: What type of vulnerability is CVE-2013-7061?

CVE-2013-7061 is a vulnerability that allows remote administrators to bypass restrictions and access sensitive information.

Q: Can CVE-2013-7061 be exploited remotely?

Yes, CVE-2013-7061 can be exploited remotely by administrators with access to the vulnerable search API.

Published May 2, 2014

Updated

Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.

Other sources

Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.

Affected Software

35 affected componentsFixes available

pip/Products.CMFPlone>=3.3<4.3.3

4.3.3

pip/Plone>=3.3b1<4.3.3

4.3.3

Plone plone=3.3

Plone plone=3.3.1

Plone plone=3.3.2

Plone plone=3.3.3

Plone plone=3.3.4

Plone plone=3.3.5

Plone plone=3.3.6

Plone plone=4.0

Plone plone=4.0.1

Plone plone=4.0.2

Plone plone=4.0.3

Plone plone=4.0.4

Plone plone=4.0.5

Plone plone=4.0.7

Plone plone=4.0.9

Plone plone=4.1

Plone plone=4.1.1

Plone plone=4.1.2

Plone plone=4.1.3

Plone plone=4.1.4

Plone plone=4.1.5

Plone plone=4.1.6

Plone plone=4.2

Plone plone=4.2.1

Plone plone=4.2.2

Plone plone=4.2.3

Plone plone=4.2.4

Plone plone=4.2.5

Plone plone=4.2.6

Plone plone=4.2.7

Plone plone=4.3

Plone plone=4.3.1

Plone plone=4.3.2

Event History

May 2, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:55 PM

DescriptionSeverityWeaknessAffected Software

May 17, 2022

Advisory Published

via GitHub·04:41 AM

Jan 14, 58316

Event

via GitHub·03:14 PM

Frequently Asked Questions

What is the severity of CVE-2013-7061?

CVE-2013-7061 is classified as having a medium severity due to its potential for unauthorized information exposure.

How do I fix CVE-2013-7061?

To fix CVE-2013-7061, upgrade Plone to version 4.3.3 or higher.

Which versions of Plone are affected by CVE-2013-7061?

CVE-2013-7061 affects Plone versions from 3.3 through 4.3.2.

What type of vulnerability is CVE-2013-7061?