NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#plone

1 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedcms1 hotfix1 information-disclosure1 remote-code-execution1 rest-api1 zope1

2 stories, newest first · one card per story

oss-security17h agohigh

Plone hotfix 20261110 addresses remote code execution

Supported Plone 6.0, 6.1 and 6.2 are affected; the forwarded notice is cut off after older versions.

plone remote-code-execution

oss-security19d ago

Unauthenticated users can list Plone site users and groups

The October 22 fix covers sites with the Plone REST API enabled; results include user ids and full names.