CVE-2020-28734

Publication date

2020-12-30 18:35:17

Family

mitre

State

PUBLISHED

Description

Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.