CVE-2007-5741

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-07 · updated 2026-06-16
Weakness: CWE-94

Description

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

Affected products

Plone CMS: 2.5, 2.5.1, 2.5.1_rc, 2.5.4, 2.5_beta1, 3.0 (+2)

References

http://osvdb.org/42071
http://osvdb.org/42072
http://plone.org/about/security/advisories/cve-2007-5741
http://secunia.com/advisories/27530
http://secunia.com/advisories/27559
http://www.debian.org/security/2007/dsa-1405
http://www.securityfocus.com/archive/1/483343/100/0/threaded
http://www.securityfocus.com/bid/26354
http://www.vupen.com/english/advisories/2007/3754
https://exchange.xforce.ibmcloud.com/vulnerabilities/38288
http://osvdb.org/42071
http://osvdb.org/42072

Get alerted when CVE-2007-5741 or the next vulnerability affects your stack