Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 06/03/2024 Updated: 06/03/2024

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.

Product: Plone CMS Version: v609 Date found: 10012024 Date reported: 10012024 Vulnerability type: Incorrect Access Control CVE ID: CVE-2024-22889 Description: Due to incorect access control in Plone version v609, remote attackers can view and list all files hosted on the website via sending a crafted request POC is coming soon:)

https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9 https://nvd.nist.gov https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-22889

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect