CVE-2020-7941: Critical severity Plone plone vulnerability
Published Jan 23, 2020
·Updated
A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.
Affected Software
3 affected components
pip/plone.app.contenttypes<2.1.6
pip/Plone>=4.3<=5.2.1
Plone plone>=4.3.0<=5.2.1
Event History
Jan 23, 2020
CVE Published
via MITRE·08:38 PM
Data Sourced
via MITRE·08:38 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityAffected Software
May 24, 2022
Advisory Published
via GitHub·05:07 PM
Frequently Asked Questions
1
What is the severity of CVE-2020-7941?
The severity of CVE-2020-7941 is critical with a CVSS score of 9.8.
2
How does CVE-2020-7941 allow privilege escalation?
CVE-2020-7941 allows users to overwrite content without needing write permission, which can lead to privilege escalation.
3
Which versions of Plone are affected by CVE-2020-7941?
Plone versions 4.3 through 5.2.1 are affected by CVE-2020-7941.
4
How can I fix CVE-2020-7941?
To fix CVE-2020-7941, it is recommended to apply the hotfix provided by Plone.
5
Where can I find more information about CVE-2020-7941?
More information about CVE-2020-7941 can be found on the NIST National Vulnerability Database (NVD) and the Plone security advisory pages.