CVE-2012-5493
published 2014-09-30CVE-2012-5493: gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute…
PriorityP346high8.5CVSS 2.0
AVNACMAuSCCICAC
EPSS
1.70%
74.3th percentile
gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.
Affected
68 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| plone | plone | <= 4.2.2 | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
| plone | plone | — | — |
CVSS provenance
nvdv2.08.5HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C
vendor_redhat8.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
(Plone): Restricted Python sandbox escape
vendor_redhat·2012-11-06·CVSS 8.5
CVE-2012-5493 [HIGH] (Plone): Restricted Python sandbox escape
(Plone): Restricted Python sandbox escape
gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.
Statement: Not vulnerable. This issue did not affect the versions of luci (as provided by conga) as shipped with Red Hat Enterprise Linux 5.
Package: conga (Red Hat Enterprise Linux 5) - Not affected
OSV
Plone Sandbox Bypass
osv·2022-05-17
CVE-2012-5493 [MEDIUM] Plone Sandbox Bypass
Plone Sandbox Bypass
`gtbn.py` in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.
GHSA
Plone Sandbox Bypass
ghsa·2022-05-17
CVE-2012-5493 [MEDIUM] CWE-693 Plone Sandbox Bypass
Plone Sandbox Bypass
`gtbn.py` in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.
OSV
CVE-2012-5493: gtbn
osv·2014-09-30
CVE-2012-5493 CVE-2012-5493: gtbn
gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2012/11/10/1https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txthttps://plone.org/products/plone-hotfix/releases/20121106https://plone.org/products/plone/security/advisories/20121106/09http://www.openwall.com/lists/oss-security/2012/11/10/1https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txthttps://plone.org/products/plone-hotfix/releases/20121106https://plone.org/products/plone/security/advisories/20121106/09
2014-09-30
Published