CVE-2024-23756

7.5 highEPSS 0.6%

High (7.5) in plone plone. EPSS 0.6% chance of exploitation in the next 30 days.

The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
Published: 2024-02-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

plone:plone

References

https://github.com/c0d3x27/CVEs/tree/main/CVE-2024-23756
https://github.com/c0d3x27/CVEs/tree/main/CVE-2024-23756

Check your stack JSON