CVE-2012-5501

at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types…

published September 30, 2014

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types via a crafted URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01413 · 72.3th percentile
Published
2014-09-30T14:00Z
EPSS history
Timeline
  • 30 SEP 14:00Z
    at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types…
    cvelistv5