A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
References
Link | Resource |
---|---|
https://www.incibe.es/en/incibe-cert/notices/aviso/cross-frame-scripting-xfs-plone-cms | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: INCIBE
Published: 2024-01-18T12:26:14.723Z
Updated: 2024-01-18T12:26:25.162Z
Reserved: 2024-01-18T08:26:22.410Z
Link: CVE-2024-0669
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-01-18T13:15:09.177
Modified: 2024-01-26T18:52:05.550
Link: CVE-2024-0669
JSON object: View
Redhat Information
No data.
CWE