CVE-2012-5491 | BDVDB-2026-64460 Detail

Description#

z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
http://www.openwall.com/lists/oss-security/2012/11/10/1
https://plone.org/products/plone/security/advisories/20121106/07
https://plone.org/products/plone-hotfix/releases/20121106

Exploit#

No public exploit known

History#

Version 12014-09-30Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.