CVE-2013-4197

CVE Database · CVE-2013-4197

CVE-2013-4197

· N/AModified

CVSS v3.1

N/A

EPSS

1.24%

Published

Mar 11, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.

Weaknesses (CWE)

CWE-20

Affected Products (52)

plone · plonevulnerable

plone · plone

References (8)

http://plone.org/products/plone-hotfix/releases/20130618

Patch

http://plone.org/products/plone/security/advisories/20130618-announcement

Vendor Advisory

http://seclists.org/oss-sec/2013/q3/261

https://bugzilla.redhat.com/show_bug.cgi?id=978478