High severity8.8NVD Advisory· Published Sep 25, 2017· Updated Jun 17, 2026
CVE-2015-7293
CVE-2015-7293
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
PlonePyPI | < 5.0a1 | 5.0a1 |
Affected products
48cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*+ 45 more
- cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:3.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.12:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.14:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:plone:plone:4.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:zope:zope_management_interface:*:*:*:*:*:*:*:*Range: <=4.3.7
Patches
Vulnerability mechanics
References
9- packetstormsecurity.com/files/133889/Zope-Management-Interface-4.3.7-Cross-Site-Request-Forgery.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
- www.exploit-db.com/exploits/38411/nvdExploitThird Party AdvisoryVDB Entry
- github.com/advisories/GHSA-p3qm-44cf-f8qxghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2015-7293ghsaADVISORY
- plone.org/security/hotfix/20151006nvdVendor AdvisoryWEB
- pypi.python.org/pypi/plone4.csrffixesnvdThird Party AdvisoryWEB
- hyp3rlinx.altervista.org/advisories/AS-ZOPE-CSRF.txtghsaWEB
- github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-51.yamlghsaWEB
- www.exploit-db.com/exploits/38411ghsaWEB
News mentions
0No linked articles in our index yet.