CVE-2024-23054

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p68

Published

Feb 5, 2024 (Feb 5, 2024)

Modified

Jul 9, 2026

Description

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).

Vendors: plone
Products: plone docker official image
Weakness: CWE-427
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.