CVE-2008-0164
plone plone cms: no CVSS score yet. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in plone 3.1.
Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page.
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- plone:plone_cms
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4j3w-g62x-hrcp | PyPI | plone | <3.1 | 3.1 |
| PYSEC-2008-14 | PyPI | plone | <3.1 | 3.1 |