Plone prior to 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
plone plone |