CVE-2024-23055
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2024-23055 is a newly disclosed vulnerability affecting Plone Docker Official Image 5.2.13. This issue enables remote code execution, which can be exploited by malicious actors. The vulnerability stems from a flaw in the input validation process of the HOST headers in this open-source software. By exploiting this weakness, attackers can inject malicious code into the system, potentially leading to serious security risks and compromises. It is strongly recommended that users of Plone Docker Official Image 5.2.13 upgrade to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- PloNE
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions