CVE-2011-1948

Advisory

Plumi.app 4.2 includes security hotfix 20110531. It contains patches for XSS and privilege escalation vulnerabilities.
https://plone.org/security/hotfix/20110531

Affected package

Affected versions

Fixed versions

Vulnerability changelog

===========================

- file ownership tweaks for production buildouts [dimo, clopy]
- add security hotfix, update LinguaPlone & plone.app.discussion [dimo]
- plonesite recipe tweaks [dimo]

Resources

• https://pypi.org/project/plumi.app
• https://pyup.io/changelogs/plumi.app/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1948