oss-sec mailing list archives

CVE Request: Bypass Restricted Python


From: Nathan Van Gheem <vangheem () gmail com>
Date: Tue, 19 Apr 2016 15:12:33 +0000

Hi,

Can a CVE be assigned to this issue, please?

https://plone.org/security/20160419/bypass-restricted-python

A user who can create or edit templates(usually only admins) can bypass
Restricted Python.

The relevant code is:

https://plone.org/security/20160419

The vendor credits with the discovery: Fred van Dijk and Maurits van Rees

Thanks, let me know if you'd like more information.

-- 
Nathan Van Gheem
Director of Solutions Engineering
Wildcard Corp

Current thread: