PT-2023-25705 · Plone+3 · Plone+3

Nicolas Verdier · Published 2023-07-03 · Updated 2023-07-17 · CVE-2023-36814

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Products.CMFCore versions prior to 3.2

Description The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in question is exposed by all portal software built on top of Products.CMFCore, such as Plone. All deployments are vulnerable.

Recommendations For versions prior to 3.2, update to version 3.2 to resolve the issue. As a temporary workaround, users can make the affected decodeFolderFilter method unreachable by editing the PortalFolder.py module in Products.CMFCore by hand and then restarting Zope. To do this, go to line 233 of PortalFolder.py and remove both the @security.public decorator for decodeFolderFilter as well as the method's entire docstring.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2023-36814

GHSA-4HPJ-8RHV-9X87

PYSEC-2023-113

Affected Products

Plone

Products.Cmfcore

Python

Zope

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36814.json · Exploit
• https://github.com/zopefoundation/Products.CMFCore/security/advisories/GHSA-4hpj-8rhv-9x87 · Vendor Advisory
• https://github.com/zopefoundation/Products.CMFCore/commit/40f03f43a60f28ca9485c8ef429efef729be54e5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36814 · Security Note
• https://osv.dev/vulnerability/GHSA-4hpj-8rhv-9x87 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2023-113 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-36814 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/products-cmfcore/PYSEC-2023-113.yaml · Note
• https://github.com/zopefoundation/Products.CMFCore/commit/c1847a9042abe7965271fa73762dfe091b576de · Note
• https://github.com/zopefoundation/Products.CMFCore · Note
• https://t.me/cibsecurity/65871 · Telegram Post
• https://t.me/cvenotify/54513 · Telegram Post