CVE-2007-5741 Plone Arbitrary Code Execution via Unsafe Handling of Pickles
Remote attackers can execute arbitrary Python code in Plone by sending malicious pickled objects to specific modules.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-5741?
CVE-2007-5741 is a high-severity unsafe deserialization vulnerability in Plone Plone, published on 7 Nov 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Weakness: CWE-94
Which versions are affected by CVE-2007-5741?
5 open source packages ship an affected version, including plone and Plone. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
plone PyPI | From 2.5 | 2.5.5, 3.0.3 |
plone PyPI | From 2.5 | 2.5.5 |
plone PyPI | From 3.0 | 3.0.3 |
Plone PyPI | From 2.5 | 2.5.5 |
Plone PyPI | From 3.0 | 3.0.3 |
Products include Plone Plone.
How do I fix CVE-2007-5741?
Upgrade plone to a fixed version for your release line: 2.5.5 or 3.0.3.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2007-5741 being exploited?
There is no known exploitation of CVE-2007-5741 in the wild and no public exploit code.
Other vulnerabilities in Plone Plone
Sources
Also known as DSA-1405-1, DSA-1405-2, GHSA-hf26-vvmx-x8c8, PYSEC-2007-4.