CVE-2016-4043

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-4043
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4043.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-4043
Aliases
Published
2017-02-24T20:59:00.360Z
Modified
2025-12-08T07:37:41.656343Z
Severity
  • 4.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.

References

Affected packages

Git / github.com/plone/plone

Affected ranges

Type
GIT
Repo
https://github.com/plone/plone
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
006f2dc3068b6d935e30bbea8e4ba41f6acacf33
Last affected
4d260f76643a633d312b81d568ca5bed57e330e0
Last affected
5d3edca6781cf97ae971db366f847e01887995e2
Last affected
5f05c642ef0796b15e447793755b1bbd8ce40905
Last affected
6371a276e3775cb11070862a0045b34aa1973b12
Last affected
c3d7603485d808537e024883ce401ad504924a5a
Last affected
c4244a4887e0901a1c17b3ee60e1cfbe19ee46c5
Last affected
d4d2a336b6ec125c60610a22a003502858ac51a5
Last affected
eb76237a4e6587a8249acfe0649c153d9d1df910

Affected versions

4.*
4.1.0
4.1a1
4.1a2
4.1a3
4.1b1
4.1b2
4.1rc1
4.1rc2
4.1rc3
4.2a1
4.2a2
4.2b1
4.2b2
4.2rc1
4.3
4.3.1
4.3a1
4.3a2
4.3b1
4.3b2
5.*
5.0a2
5.0a3
5.0b1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4043.json"

Git / github.com/plone/plone.namedfile

Affected ranges

Type
GIT
Repo
https://github.com/plone/plone.namedfile
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
29e22ca1987dcae970b89f39a4479171426bb6bf
Last affected
49fb6e5b7f97a02402bc12219a9d8e7d04c6e217
Last affected
a032401cf4e229af4ba216db39602c88699dca13
Last affected
b67f856cd88a6d290332c43f286c59b584eb8082

Affected versions

1.*
1.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0b5
1.0b6
1.0b7
1.0b8
2.*
2.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.1.0
3.*
3.0.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
4.*
4.0
4.1
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.2.3
5.*
5.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4043.json"