VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 5, 2024· Updated Jul 9, 2026

CVE-2024-23054

CVE-2024-23054

Description

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Plone (software)/Plone Docker Official Image2 versions
    cpe:2.3:a:plone:plone_docker_official_image:5.2.13:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:plone:plone_docker_official_image:5.2.13:*:*:*:*:*:*:*
    • (no CPE)range: 5.2.13 (5221)
  • Plone/Plone Docker Official Imagedescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.