NVD

Id
39841  
Name
CVE-2013-4193  
Description
typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote attackers to hide fields on the forms via a crafted URL.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-03-11  
Modified Date
2014-03-11  
Seq
2013-4193  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202654 39841 CVE-2013-4193 http://plone.org/products/plone-hotfix/releases/20130618  View
202655 39841 CVE-2013-4193 http://plone.org/products/plone/security/advisories/20130618-announcement  View
202656 39841 CVE-2013-4193 [oss-security] 20130801 Re: CVE Request -- Plone: 20130618 Hotfix (multiple vectors)  View
202657 39841 CVE-2013-4193 https://bugzilla.redhat.com/show_bug.cgi?id=978469  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24581 JVNDB-2013-006156 Plone の typeswidget.py におけるフォーム上のフィールドを非表示にされる脆弱性 Plone の typeswidget.py は、不特定のコンテンツの編集フォームに不変的な設定を適切に適用しないため、フォーム上のフィールドを非表示にされる脆弱性が存在します。 CVE-2013-4193 64135 CVE-2013-4193 39841 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006156.html 2013-06-18 2014-03-13 View