CVE-2016-7147
Last modified
CVE-2016-7147 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140.. EPSS estimates a 1.34% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Plone | Plone | 2.5.5 | — |
| Plone | Plone | 3.3 | — |
| Plone | Plone | 3.3.1 | — |
| Plone | Plone | 3.3.2 | — |
| Plone | Plone | 3.3.3 | — |
| Plone | Plone | 3.3.4 | — |
| Plone | Plone | 3.3.5 | — |
| Plone | Plone | 3.3.6 | — |
| Plone | Plone | 4.0 | — |
| Plone | Plone | 4.0.1 | — |
| Plone | Plone | 4.0.2 | — |
| Plone | Plone | 4.0.3 | — |
| Plone | Plone | 4.0.4 | — |
| Plone | Plone | 4.0.5 | — |
| Plone | Plone | 4.0.7 | — |
| Plone | Plone | 4.0.8 | — |
| Plone | Plone | 4.0.9 | — |
| Plone | Plone | 4.0.10 | — |
| Plone | Plone | 4.1 | — |
| Plone | Plone | 4.1.1 | — |
| Plone | Plone | 4.1.2 | — |
| Plone | Plone | 4.1.3 | — |
| Plone | Plone | 4.1.4 | — |
| Plone | Plone | 4.1.5 | — |
| Plone | Plone | 4.1.6 | — |
| Plone | Plone | 4.2 | — |
| Plone | Plone | 4.2.1 | — |
| Plone | Plone | 4.2.2 | — |
| Plone | Plone | 4.2.3 | — |
| Plone | Plone | 4.2.4 | — |
| Plone | Plone | 4.2.5 | — |
| Plone | Plone | 4.2.6 | — |
| Plone | Plone | 4.2.7 | — |
| Plone | Plone | 4.3 | — |
| Plone | Plone | 4.3.1 | — |
| Plone | Plone | 4.3.2 | — |
| Plone | Plone | 4.3.3 | — |
| Plone | Plone | 4.3.4 | — |
| Plone | Plone | 4.3.5 | — |
| Plone | Plone | 4.3.6 | — |
| Plone | Plone | 4.3.7 | — |
| Plone | Plone | 4.3.8 | — |
| Plone | Plone | 4.3.9 | — |
| Plone | Plone | 4.3.10 | — |
| Plone | Plone | 4.3.11 | — |
| Plone | Plone | 5.0 | — |
| Plone | Plone | 5.0.1 | — |
| Plone | Plone | 5.0.2 | — |
| Plone | Plone | 5.0.3 | — |
| Plone | Plone | 5.0.4 | — |
Showing 50 of 53 affected configurations. See NVD for the full list.
References
- https://plone.org/security/hotfix/20170117Patch, Release Notes, Vendor Advisory
- https://www.curesec.com/blog/article/blog/Plone-XSS-186.htmlPatch, Third Party Advisory, VDB Entry
- https://plone.org/security/hotfix/20170117Patch, Release Notes, Vendor Advisory
- https://www.curesec.com/blog/article/blog/Plone-XSS-186.htmlPatch, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-7147?
How severe is CVE-2016-7147?
How do I fix CVE-2016-7147?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-7141curl and libcurl before 7.50.2, when built with NSS and the …
- CVE-2016-7142The m_sasl module in InspIRCd before 2.0.23, when used with …
- CVE-2016-7143The m_authenticate function in modules/m_sasl.c in Charybdis…
- CVE-2016-7144The m_authenticate function in modules/m_sasl.c in UnrealIRC…
- CVE-2016-7145The m_authenticate function in ircd/m_authenticate.c in nefa…
- CVE-2016-7146MoinMoin 1.9.8 allows remote attackers to conduct "JavaScrip…
- CVE-2016-7148MoinMoin 1.9.8 allows remote attackers to conduct "JavaScrip…
- CVE-2016-7149Cross-site scripting (XSS) vulnerability in b2evolution 6.7.…
- CVE-2016-7150Cross-site scripting (XSS) vulnerability in b2evolution 6.7.…
- CVE-2016-7151Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caus…
- CVE-2016-7152The HTTPS protocol does not consider the role of the TCP con…
- CVE-2016-7153The HTTP/2 protocol does not consider the role of the TCP co…
Are you affected by CVE-2016-7147?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST