https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T09:42:58.832529+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2012-5500 CVE-2012-5500 2026-10-17T09:42:58.865885+00:00

The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.

 https://cve.radiocsirt.org/vuln/ghsa-2q75-f7cp-w86q GHSA-2q75-f7cp-w86q — Plone contains Cross-site Request Forgery 2026-10-17T09:42:58.865940+00:00

Affected: PyPI: Plone

The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.