Skip to content
Threat Feed
Subscribe

Product

Plone.app.content

1 brief RSS
medium advisory

Plone: Unauthenticated user enumeration via plone.app.content

An information disclosure vulnerability in plone.app.content allows unauthenticated attackers to enumerate site users and groups when the Plone REST API is enabled.

plone.app.content information-disclosure reconnaissance web-application
1t