CVE-2015-7315

Description

Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.436

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are affected in Python-plone 3.3.6	Windows
Vulnerabilities CVE-2015-7315 are affected in Python-plone 4.0.10	Windows
Vulnerabilities CVE-2015-7315 are affected in Python-plone 4.1.6	Windows
Vulnerabilities CVE-2015-7315 are affected in Python-plone 4.2.7	Windows
Vulnerabilities CVE-2015-7315 are affected in Python-plone 4.3.6	Windows
Vulnerabilities CVE-2015-7315,CVE-2015-7316 are affected in Python-plone 5.0rc1	Windows
Vulnerabilities CVE-2015-7315 are fixed in Python-products-cmfplone 4.3.7	Windows
Vulnerabilities CVE-2015-7315 are fixed in Python-products-cmfplone 5.0rc2	Windows
Multiple vulnerabilities are affected in Python-plone for linux 3.3.6	Linux
Vulnerabilities CVE-2015-7315 are affected in Python-plone for linux 4.0.10	Linux
Vulnerabilities CVE-2015-7315 are affected in Python-plone for linux 4.1.6	Linux
Vulnerabilities CVE-2015-7315 are affected in Python-plone for linux 4.2.7	Linux
Vulnerabilities CVE-2015-7315 are affected in Python-plone for linux 4.3.6	Linux
Vulnerabilities CVE-2015-7315,CVE-2015-7316 are affected in Python-plone for linux 5.0rc1	Linux
Vulnerabilities CVE-2015-7315 are fixed in Python-products-cmfplone for linux 4.3.7	Linux
Vulnerabilities CVE-2015-7315 are fixed in Python-products-cmfplone for linux 5.0rc2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234