PYSEC-2014-38

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/plone/PYSEC-2014-38.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2014-38
Aliases
Published
2014-09-30T14:55:00Z
Modified
2026-06-10T17:02:30Z
Summary
[none]
Details

kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL.

References

Affected packages

PyPI / plone

Package

Name
plone
View open source insights on deps.dev
Purl
pkg:pypi/plone

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.6

Affected versions

3.*
3.2a1
3.2rc1
3.2
3.2.1
3.2.2
3.2.3
3.3b1
3.3rc1
3.3rc2
3.3rc3
3.3rc4
3.3rc5
3.3
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/plone/PYSEC-2014-38.yaml"