CVE-2024-23055
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2024-23055 is a newly disclosed vulnerability affecting Plone Docker Official Image 5.2.13. This issue enables remote code execution, which can be exploited by malicious actors. The vulnerability stems from a flaw in the input validation process of the HOST headers in this open-source software. By exploiting this weakness, attackers can inject malicious code into the system, potentially leading to serious security risks and compromises. It is strongly recommended that users of Plone Docker Official Image 5.2.13 upgrade to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- PloNE