Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:08:50 +0000 CVE-2023-36814 — zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input… https://cve.radiocsirt.org/vuln/cve-2023-36814 <p><strong>Affected:</strong> zopefoundation Products.CMFCore</p> <p>Products.CMFCore are the key framework services for the Zope Content Management Framework (CMF). The use of Python&#39;s marshal module to handle unchecked input in a public method on `PortalFolder` objects can lead to an unauthenticated denial of service and crash situation. The code in question is exposed by all portal software built on top of `Products.CMFCore`, such as Plone. All deployments are vulnerable. The code has been fixed in `Products.CMFCore` version 3.2.</p> <p><strong>Affected:</strong> zopefoundation Products.CMFCore</p> <p>Products.CMFCore are the key framework services for the Zope Content Management Framework (CMF). The use of Python&#39;s marshal module to handle unchecked input in a public method on `PortalFolder` objects can lead to an unauthenticated denial of service and crash situation. The code in question is exposed by all portal software built on top of `Products.CMFCore`, such as Plone. All deployments are vulnerable. The code has been fixed in `Products.CMFCore` version 3.2.</p> https://cve.radiocsirt.org/vuln/cve-2023-36814