{"id":"CVE-2007-5741","aliases":["DEBIAN-CVE-2007-5741","DSA-1405-1","DSA-1405-2","EUVD-2007-0002","GHSA-hf26-vvmx-x8c8","PYSEC-2007-4"],"status":"published","title":"Plone Arbitrary Code Execution via Unsafe Handling of Pickles","description":"Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02205,"percentile":0.82677,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2007-11-07T21:00:00Z","modified":"2026-07-02T13:00:05Z","fixes":[{"ecosystem":"PyPI","package":"plone","fixed_in":["2.5.5","3.0.3"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:4.0","package":"zope-cmfplone","fixed_in":["2.5.1-4etch1","2.5.1-4etch2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"plone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5"},{"last_affected":"2.5.4"},{"fixed":"2.5.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"plone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0"},{"last_affected":"3.0.2"},{"fixed":"3.0.3"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"zope-cmfplone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-4etch1"}]}],"versions":["2.5.1-4"]},{"source":"osv","ecosystem":"Debian:4.0","package":"zope-cmfplone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-4etch2"}]}],"versions":["2.5.1-4","2.5.1-4etch1"]},{"source":"osv","ecosystem":"PyPI","package":"plone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5"},{"fixed":"2.5.5"}]}]},{"source":"osv","ecosystem":"PyPI","package":"plone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0"},{"fixed":"3.0.3"}]}]},{"source":"osv","ecosystem":"PyPI","package":"plone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5"},{"fixed":"2.5.5"},{"introduced":"3.0"},{"fixed":"3.0.3"}]}]}],"products":[{"vendor":"plone","product":"plone"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38288","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://osvdb.org/42071","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/26354","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","fix"]},{"url":"http://secunia.com/advisories/27559","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/27530","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory","fix","advisory"]},{"url":"http://www.securityfocus.com/archive/1/483343/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.debian.org/security/2007/dsa-1405","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","web","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/3754","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://plone.org/about/security/advisories/cve-2007-5741","tags":["x_refsource_CONFIRM","x_transferred","web","advisory"]},{"url":"http://osvdb.org/42072","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5741","tags":["advisory"]},{"url":"https://web.archive.org/web/20080507055819/https://plone.org/about/security/advisories/cve-2007-5741","tags":["web"]},{"url":"https://web.archive.org/web/20080517012557/http://www.securityfocus.com/bid/26354","tags":["web"]},{"url":"https://web.archive.org/web/20080906150436/http://www.securityfocus.com/archive/1/483343/100/0/threaded","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2007-4.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-hf26-vvmx-x8c8","tags":["advisory"]},{"url":"https://github.com/plone/Plone","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2007-5741","description":"Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.","status":"published","published":"2007-11-07T21:00:00Z","modified":"2024-08-07T15:39:13.671Z","updated_at":"2026-11-02T13:32:00.617893Z"}],"euvd":[{"id":"EUVD-2007-0002","description":"Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.","status":"published","published":"2007-11-07T21:00:00Z","modified":"2024-08-07T15:39:13Z","updated_at":"2026-11-03T01:16:16.701576Z"}],"ghsa":[{"id":"GHSA-hf26-vvmx-x8c8","title":"Plone Arbitrary Code Execution via Unsafe Handling of Pickles","description":"Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.","status":"published","published":"2022-05-01T18:36:14Z","modified":"2024-11-26T16:50:15Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:38:23.575854Z"}],"nvd":[{"id":"CVE-2007-5741","description":"Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.","status":"published","published":"2007-11-07T21:46:00Z","modified":"2026-06-16T22:46:44.46Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:01:22.203764Z"}],"osv":[{"id":"GHSA-hf26-vvmx-x8c8","title":"Plone Arbitrary Code Execution via Unsafe Handling of Pickles","description":"Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.","status":"published","published":"2022-05-01T18:36:14Z","modified":"2024-11-26T16:50:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:48.920784Z"},{"id":"DSA-1405-1","title":"zope-cmfplone - arbitrary code","status":"published","published":"2007-11-09T00:00:00Z","modified":"2026-03-09T01:01:43.198444Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DSA-1405-2","title":"zope-cmfplone - arbitrary code","status":"published","published":"2007-11-11T00:00:00Z","modified":"2026-03-09T01:00:51.568141Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"PYSEC-2007-4","description":"Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.","status":"published","published":"2007-11-07T21:46:00Z","modified":"2026-07-02T13:00:05.001765776Z","updated_at":"2026-11-02T15:52:51.254177Z"}]}}