CVE-2013-4194

Plone 2.1-4.1 4.2.x-4.2.5 4.3.x-4.3.1 - Information Disclosure via WYSIWYG Component Error Message

Title source: llm
STIX 2.1

Description

The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.

References (4)

Core 4
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=978470
Mailing List mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2013/q3/261

Scores

EPSS 0.0121
EPSS Percentile 64.9%

Details

CWE
CWE-200
Status published
Products (50)
plone/plone 4.3
plone/plone 4.3.1
plone/plone 4.2
plone/plone 4.2.1
plone/plone 4.2.2
plone/plone 4.2.3
plone/plone 4.2.4
plone/plone 4.2.5
plone/plone 2.1
plone/plone 2.1.1
... and 40 more
Published Mar 11, 2014
Tracked Since Feb 18, 2026