CVE-2024-23054

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-02-05 · updated 2026-07-09
Weakness: CWE-427

Description

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).

Affected products

Plone Docker Official Image: 5.2.13

References

https://github.com/c0d3x27/CVEs/blob/main/CVE-2024-23054/README.md
https://github.com/c0d3x27/CVEs/blob/main/CVE-2024-23054/README.md

Get alerted when CVE-2024-23054 or the next vulnerability affects your stack