CVE-2024-22889

Published: Mar 6, 2024
Updated: May 4, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-22889" target="_blank" rel="noopener"> CVE-2024-22889
GHSA: <a href="https://github.com/advisories/GHSA-xg5p-8wg5-rhxm" target="_blank" rel="noopener"> GHSA-xg5p-8wg5-rhxm
Severity: High
Exploit:

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.