Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-22889 PoC — Plone 安全漏洞

Source
https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9
Associated Vulnerability
Title:Plone 安全漏洞 (CVE-2024-22889)
Description:Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.
Readme
Product: Plone CMS 

Version: v6.0.9 

Date found: 10.01.2024. 

Date reported: 10.01.2024. 

Vulnerability type: Incorrect Access Control. 

CVE ID: CVE-2024-22889 

Description: Due to incorect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.

POC is coming soon:)
File Snapshot

 [4.0K]  /data/pocs/2107e9c43417322332e71a9915de470ecd55dca6
├── [ 350]  CVE-2024-22889
└── [ 356]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →