Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Plone和z3c.form 信息泄露漏洞
Vulnerability Description
Plone是美国Plone基金会的一套建立在应用服务器（Zope）上的免费且开源的内容管理系统（CMS）。z3c.form是一个基于Plone的高级表单和小工具框架包。 Plone 4.2.2及之前版本和4.3版本中使用的z3c.form中存在安全漏洞。远程攻击者可通过已知的表单位置和元素id利用该漏洞获取默认的表单字段值。
CVSS Information
N/A
Vulnerability Type
N/A