PT-2026-53538 · Pypi · Plone.App.Contenttypes

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.

Correção

Identificadores relacionados

PYSEC-2026-459

Produtos afetados

Plone.App.Contenttypes

Referências · 11

• https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-90.yaml · Nota
• https://github.com/plone/plone.app.contenttypes · Nota
• https://github.com/plone/plone.app.contenttypes/blob/master/CHANGES.rst?plain=1#L372-L374 · Nota
• https://plone.org/security/hotfix/20200121/privilege-escalation-for-overwriting-content · Nota
• https://osv.dev/vulnerability/PYSEC-2026-459 · Aviso do Fabricante
• https://pypi.org/project/plone-app-contenttypes · Nota
• https://openwall.com/lists/oss-security/2020/01/22/1 · Nota
• https://github.com/advisories/GHSA-w6g9-xccc-347h · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-7941 · Nota de Segurança
• http://openwall.com/lists/oss-security/2020/01/24/1 · Nota
• https://plone.org/security/hotfix/20200121 · Nota