CVE-2011-2528

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-07-19 · updated 2026-06-16

Description

Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.

Affected products

Plone CMS: 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5 (+30)
Plone Hotfix 20110720: all versions
zopefoundation Zope: 2.12.0, 2.12.0-a1, 2.12.0-a2, 2.12.0-a3, 2.12.0-a4, 2.12.0-b1 (+35)

References

http://plone.org/products/plone-hotfix/releases/20110622
http://plone.org/products/plone/security/advisories/20110622
http://secunia.com/advisories/45056
http://secunia.com/advisories/45111
http://www.openwall.com/lists/oss-security/2011/07/04/6
http://www.openwall.com/lists/oss-security/2011/07/12/9
https://bugzilla.redhat.com/show_bug.cgi?id=718824
https://mail.zope.org/pipermail/zope-announce/2011-June/002260.html
http://plone.org/products/plone-hotfix/releases/20110622
http://plone.org/products/plone/security/advisories/20110622
http://secunia.com/advisories/45056
http://secunia.com/advisories/45111

Get alerted when CVE-2011-2528 or the next vulnerability affects your stack