CVE-2007-5741

CVE Database · CVE-2007-5741

CVE-2007-5741

· N/AModified

CVSS v3.1

N/A

EPSS

2.19%

Published

Nov 7, 2007

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

Weaknesses (CWE)

CWE-94

Affected Products (8)

plone · plonevulnerable

References (20)

http://osvdb.org/42071

http://osvdb.org/42072

http://plone.org/about/security/advisories/cve-2007-5741

http://secunia.com/advisories/27530

PatchVendor Advisory

http://secunia.com/advisories/27559

http://www.debian.org/security/2007/dsa-1405

http://www.securityfocus.com/archive/1/483343/100/0/threaded

http://www.securityfocus.com/bid/26354

Patch

http://www.vupen.com/english/advisories/2007/3754

https://exchange.xforce.ibmcloud.com/vulnerabilities/38288

http://osvdb.org/42071

KEV Catalog EPSS Scores Vendors All CVEs