GHSA-8pcw-h6w9-h46g: plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
When creating an Image or File with a very large filename, Plone can become unresponsive. Even if the content loads, it can be hard to edit or delete, because the UI is unwieldy.
References
- github.com/advisories/GHSA-8pcw-h6w9-h46g
- github.com/plone/plone.app.contenttypes/commit/13dc98a578341aac24a1e65fd9bc7ac8a07d168a
- github.com/plone/plone.app.contenttypes/commit/21bae6ebe424689eeac9a5884fc0da35f4944e63
- github.com/plone/plone.app.contenttypes/commit/639c0619f371df578e69ec94e5ca98e60fd6ed58
- github.com/plone/plone.app.contenttypes/commit/7bb03e8ec6c6bd0e645f445b0755e85a51afb158
- github.com/plone/plone.app.contenttypes/commit/bed1547d4f8b1fc995f2c76f30ba5f20276a8ad6
- github.com/plone/plone.app.contenttypes/pull/744
- github.com/plone/plone.app.contenttypes/releases/tag/3.0.12
- github.com/plone/plone.app.contenttypes/releases/tag/4.0.10
- github.com/plone/plone.app.contenttypes/releases/tag/5.0.1
- github.com/plone/plone.app.contenttypes/security/advisories/GHSA-8pcw-h6w9-h46g
Code Behaviors & Features
Detect and mitigate GHSA-8pcw-h6w9-h46g with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →