COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2024-23054

CVE-2024-23054

Severity
critical
Source
NVD · cve
Published
2024-02-05
CVSS
9.8
Reference
https://nvd.nist.gov/vuln/detail/CVE-2024-23054
⚡ RCE shame 50/100 rce

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).

Players implicated

plone · vendorplone docker official image · product

Description

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.