CVE-2017-1000483
N/A
Published: January 3, 2018 at 06:00 PM UTC
Updated: June 17, 2026 at 12:59 AM UTC
1 product affected across 1 vendorPlone
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.9%
Description
Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.5.53.33.3.13.3.23.3.33.3.43.3.53.3.64.04.0.14.0.104.0.24.0.34.0.44.0.54.0.74.0.84.0.94.14.1.14.1.24.1.34.1.44.1.54.1.64.24.2.14.2.24.2.34.2.44.2.54.2.64.2.74.34.3.14.3.104.3.114.3.124.3.144.3.154.3.24.3.34.3.44.3.54.3.64.3.74.3.84.3.95.05.0 rc15.0 rc25.0 rc35.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.95.15.1 a15.1 a25.1 b25.1 b35.1 b45.1 rc1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
x_refsource_MISCVendor Advisory
Source: [email protected]
https://plone.org/security/hotfix/20171128/sandbox-escapeQuick Info
StatusMODIFIED
CWE
NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card