CVE-2012-5495

Plone <4.2.3, <4.3 - Beta 1 - RCE

Title source: llm

python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "go_back."

Core 4

Core References

Various Sources x_refsource_confirm

Mailing List mailing-list x_refsource_mlist

Vendor Advisory x_refsource_confirm

Patch x_refsource_confirm

EPSS 0.0064

EPSS Percentile 70.6%

CWE

CWE-94

Status published

Products (50)

plone/plone 1.0

plone/plone 1.0.1

plone/plone 1.0.2

plone/plone 1.0.3

plone/plone 1.0.4

plone/plone 1.0.5

plone/plone 1.0.6

plone/plone 2.0

plone/plone 2.0.1

plone/plone 2.0.2

... and 40 more

Published Sep 30, 2014

Tracked Since Feb 18, 2026