File and Path Handling

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. (dot dot) in the path param…CVE-2016-7135Plone · 2.6% likely

   CWE-22

2. An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not exi…CVE-2024-23054Plone · CVSS 9.8 · 1.3% likely

   CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.