CVE-2026-57576— Plone组件标题描述过长致拒绝服务漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

plone plone.app.dexterity

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based content types. Plone.app.dexterity versions through 3.2.2, 4.0.0 through 4.1.2, and 5.0.0, and plone.app.contentty

CVE-2026-57576 影响 plone plone.app.dexterity。尚无明确在野利用证据，仍需结合暴露面评估。plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based content types. Plone.app.dexterity CVE-2026-57576 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2026-57576

一、 漏洞 CVE-2026-57576 基础信息

受影响产品

二、漏洞 CVE-2026-57576 的公开POC

三、漏洞 CVE-2026-57576 的情报信息

CVE-2026-57576 补丁与修复 (10)

• 🔗 Merge pull request #433 from plone/title_max_length · plone/plone.app.dexterity@2fdceb1 · GitHub 查看完整文章 x_refsource_MISC
• 🔗 Don's set a too long context title in 'name from filename'. · plone/plone.app.dexterity@f359653 · GitHub 查看完整文章 x_refsource_MISC
• 🔗 Fix max_length for title and description · plone/plone.app.dexterity@0d317df · GitHub 查看完整文章 x_refsource_MISC
• 🔗 Define MAX_DESCRIPTION_LENGTH and MAX_TITLE_LENGTH in new config.py. · plone/plone.app.dexterity@cbcef73 · GitHub 查看完整文章 x_refsource_MISC
• 🔗 fix max_length for title and description · plone/plone.app.dexterity@4116890 · GitHub 查看完整文章 x_refsource_MISC
• 🔗 Restrict title to 1024 when setting it based on a filename. · plone/plone.app.contenttypes@bed1547 · GitHub 查看完整文章 x_refsource_MISC
• 🔗 Restrict title to 1024 when setting it based on a filename. · plone/plone.app.contenttypes@639c061 · GitHub 查看完整文章 x_refsource_MISC
• 🔗 Set max_length in image and file content types. · plone/plone.app.contenttypes@7bb03e8 · GitHub 查看完整文章 x_refsource_MISC
• 🔗 Restrict title to 1024 when setting it based on a filename. · plone/plone.app.contenttypes@13dc98a · GitHub 查看完整文章 x_refsource_MISC
• 🔗 Merge pull request #744 from plone/title_max_length · plone/plone.app.contenttypes@21bae6e · GitHub 查看完整文章 x_refsource_MISC

CVE-2026-57576 其他参考 (2)

• 🔗 Denial of Service due to excessive title or description length · Advisory · plone/plone.app.dexterity · GitHub 查看完整文章 x_refsource_CONFIRM
• 🔗 Denial of Service in File Upload due to excessive filename length · Advisory · plone/plone.app.contenttypes · GitHub x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2026-57576

IV. Related Vulnerabilities

V. Comments for CVE-2026-57576