CVE-2020-7939

SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries

published January 23, 2020

CVSS
—
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01225 · 68.6th percentile
Published
2020-01-23T20:38Z
EPSS history
Timeline
  • 23 JAN 20:38Z
    SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries
    cvelistv5