CVE-2007-5741: Plone

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

Affected products

• Plone Plone: version 2.5 only; version 2.5.1 only; version 2.5.1_rc only; version 2.5.4 only; version 2.5_beta1 only; version 3.0 only; …

Published 2007-11-07. Last modified 2026-06-16.