VULNERABILITY INTELLIGENCE

CVE-2012-5487

CVSS score8.5 HIGH

EPSS probability1.71%

CISA KEVNot currently listed

Published2014-09-30

Last modified2026-06-16

Description

The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.