CVE-2011-3587

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

78.08% chance of exploitation in the next 30 days, 100th percentile

Published

2011-10-10

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/plone_popen2.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18262

References

• CVE Record
• NVD entry

Related

• CVE-2011-3582
• CVE-2011-3595
• CVE-2011-3579
• CVE-2011-3596
• CVE-2011-3575
• CVE-2011-3597