CVE-2024-23756
The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading…
Published: 2024-02-08 · CVSS: 7.5 · CVSS 3.1
The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7