CVE-2024-22889: Plone

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.

Affected products

• Plone Plone: version 6.0.9 only

Published 2024-03-06. Last modified 2026-06-17.