What’s Vulnerable › Vulnerabilities

CVE-2024-23756

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-02-08 · updated 2026-06-17

Description

The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them.

Affected products

• Plone CMS: 5.2.13

References

• https://github.com/c0d3x27/CVEs/tree/main/CVE-2024-23756
• https://github.com/c0d3x27/CVEs/tree/main/CVE-2024-23756

Get alerted when CVE-2024-23756 or the next vulnerability affects your stack