CVE-2012-5493

Published Sep 30, 2014

Last updated 10 years ago

Overview

Description
gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.
Source
secalert@redhat.com
NVD status
Analyzed

Risk scores

CVSS 2.0

Type
Primary
Base score
8.5
Impact score
10
Exploitability score
6.8
Vector string
AV:N/AC:M/Au:S/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-94

Social media

Hype score
Not currently trending

Configurations