CVE-2012-5505

Plone <4.2.3, <4.3 - Info Disclosure

Title source: llm

atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.

Core 4

Core References

Various Sources x_refsource_confirm

Mailing List mailing-list x_refsource_mlist

Vendor Advisory x_refsource_confirm

Patch x_refsource_confirm

EPSS 0.0032

EPSS Percentile 55.0%

CWE

CWE-200

Status published

Products (50)

plone/plone 1.0

plone/plone 1.0.1

plone/plone 1.0.2

plone/plone 1.0.3

plone/plone 1.0.4

plone/plone 1.0.5

plone/plone 1.0.6

plone/plone 2.0

plone/plone 2.0.1

plone/plone 2.0.2

... and 40 more

Published Sep 30, 2014

Tracked Since Feb 18, 2026