What’s Vulnerable › Vulnerabilities

CVE-2016-4043

• Severity: medium (CVSS 4.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-24 · updated 2026-06-17
• Weakness: CWE-264

Description

Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.

Affected products

• Plone CMS: 5.0, 5.0-rc1, 5.0-rc2, 5.0-rc3, 5.0.1, 5.0.2 (+3)

References

• http://www.openwall.com/lists/oss-security/2016/04/20/3
• https://plone.org/security/hotfix/20160419/bypass-restricted-python
• http://www.openwall.com/lists/oss-security/2016/04/20/3
• https://plone.org/security/hotfix/20160419/bypass-restricted-python

Get alerted when CVE-2016-4043 or the next vulnerability affects your stack