CVE-2013-4199

Published: Mar 11, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

(1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).

Affected (52)

Products: Plone: Plone

Plone

1 product

Plone

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Plone Plone	Version 4.2.1
Plone Plone	Version 4.2.2
Plone Plone	Version 4.2.3
Plone Plone	Version 4.2.4
Plone Plone	Version 4.2.5
Plone Plone	Version 4.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Plone Plone	Version 4.3.1
Plone Plone	Version 4.3

Configuration C

44 vulnerable

Vulnerable Software	Affected Versions
Plone Plone	Version 2.1.1
Plone Plone	Version 2.1.2
Plone Plone	Version 2.1.3
Plone Plone	Version 2.1.4
Plone Plone	Version 2.1
Plone Plone	Version 2.5.1
Plone Plone	Version 2.5.2
Plone Plone	Version 2.5.3
Plone Plone	Version 2.5.4
Plone Plone	Version 2.5.5
Plone Plone	Version 2.5
Plone Plone	Version 3.0.1
Plone Plone	Version 3.0.2
Plone Plone	Version 3.0.3
Plone Plone	Version 3.0.4
Plone Plone	Version 3.0.5
Plone Plone	Version 3.0.6
Plone Plone	Version 3.0
Plone Plone	Version 3.1.1
Plone Plone	Version 3.1.2
Plone Plone	Version 3.1.3
Plone Plone	Version 3.1.4
Plone Plone	Version 3.1.5.1
Plone Plone	Version 3.1.6
Plone Plone	Version 3.1.7
Plone Plone	Version 3.1
Plone Plone	Version 3.2.1
Plone Plone	Version 3.2.2
Plone Plone	Version 3.2.3
Plone Plone	Version 3.2
Plone Plone	Version 3.3.1
Plone Plone	Version 3.3.2
Plone Plone	Version 3.3.3
Plone Plone	Version 3.3.4
Plone Plone	Version 3.3.5
Plone Plone	Version 3.3
Plone Plone	Version 4.0.1
Plone Plone	Version 4.0.2
Plone Plone	Version 4.0.3
Plone Plone	Version 4.0.4
Plone Plone	Version 4.0.5
Plone Plone	Version 4.0.6.1
Plone Plone	Version 4.0
Plone Plone	Version 4.1