CVE-2016-4043: Medium severity Plone plone vulnerability
Published Feb 24, 2017
·Updated
Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.
Affected Software
11 affected components
pip/Plone=5.1a1
pip/Plone>=5.0rc1<=5.0.4
Plone plone=5.0
Plone plone=5.0-rc1
Plone plone=5.0-rc2
Plone plone=5.0-rc3
Plone plone=5.0.1
Plone plone=5.0.2
Plone plone=5.0.3
Plone plone=5.0.4
Plone plone=5.1a1
Event History
Feb 24, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:59 PM
DescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·02:57 AM
Frequently Asked Questions
1
What is the severity of CVE-2016-4043?
CVE-2016-4043 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-4043?
To remediate CVE-2016-4043, upgrade your Plone installation to version 5.0.5 or later.
3
Who is affected by CVE-2016-4043?
CVE-2016-4043 affects remote authenticated users of Plone versions 5.0rc1 to 5.1a1.
4
What type of attack does CVE-2016-4043 allow?
CVE-2016-4043 allows authenticated users to bypass Restricted Python and potentially execute arbitrary code.
5
What are the affected versions of Plone for CVE-2016-4043?
The affected versions of Plone for CVE-2016-4043 are 5.0rc1 through 5.1a1.