CVE-2011-4030: Plone Cmfeditions

High severity, CVSS 9.3. EPSS: 2% chance of exploitation in the next 30 days.

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

Affected products

• Plone Cmfeditions: version 2.0a1 only; version 2.0b1 only; version 2.0b2 only; version 2.0b3 only; version 2.0b4 only; version 2.0b5 only; …
• Plone Plone: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2011-10-10. Last modified 2026-06-16.