CVE-2011-3587

Description

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

90.592

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2011-3587 are fixed in Python-zope2 2.12.20	Windows
Vulnerabilities CVE-2011-3587 are fixed in Python-zope2 2.13.10	Windows
Vulnerabilities CVE-2011-3587 are fixed in Python-zope2 for linux 2.12.20	Linux
Vulnerabilities CVE-2011-3587 are fixed in Python-zope2 for linux 2.13.10	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234