Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 08:17:49 +0000 EUVD-2026-113094 https://cve.radiocsirt.org/vuln/euvd-2026-113094 EUVD-2026-113094 https://cve.radiocsirt.org/vuln/euvd-2026-113094 fkie_cve-2012-5489 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5489 <p>The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.</p> <p>The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-5489 GHSA-879r-7f3w-8jj3 — Plone and Zope2 vulnerable to unauthorized access to restricted attributes https://cve.radiocsirt.org/vuln/ghsa-879r-7f3w-8jj3 <p><strong>Affected:</strong> PyPI: Zope2, PyPI: Plone</p> <p>The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.</p> <p><strong>Affected:</strong> PyPI: Zope2, PyPI: Plone</p> <p>The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-879r-7f3w-8jj3 gsd-2012-5489 https://cve.radiocsirt.org/vuln/gsd-2012-5489 gsd-2012-5489 https://cve.radiocsirt.org/vuln/gsd-2012-5489 PYSEC-2014-31 https://cve.radiocsirt.org/vuln/pysec-2014-31 <p><strong>Affected:</strong> PyPI: plone</p> <p>The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.</p> <p><strong>Affected:</strong> PyPI: plone</p> <p>The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/pysec-2014-31