CVE-2016-7135: Directory Traversal Vulnerability in Plone CMS
Summary
CVE-2016-7135: Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. Affects plone across 2 version ranges.
>= 4.2, < 4.3.12
>= 5.0, < 5.0.7
Fixed in 4.3.12 or 5.0.7, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Plone CMS is an open-source content management system written in Python. It provides a robust platform for building websites, intranets, and web applications. Plone CMS versions 5.x through 5.0.6 and 4.2.x through 4.3.11 are affected by a directory traversal vulnerability. This vulnerability allows remote administrators to read arbitrary files by exploiting a '..' (dot dot) in the path parameter of the getFile action in Plone/++theme++barceloneta/@@plone.resourceeditor.filemanager-actions.
Vulnerability Detail
The directory traversal vulnerability in Plone CMS allows remote administrators to access and read arbitrary files on the server. By manipulating the path parameter and using '..' to traverse directories, an attacker can bypass access restrictions and retrieve sensitive information. This can lead to unauthorized disclosure of confidential data, including configuration files, user credentials, and other sensitive information stored on the server. The vulnerability poses a significant risk to the confidentiality and integrity of the affected Plone installations.
How To Fix
Latest published version: 6.2.2 as of 23 Oct 2026
pip install --upgrade "plone==6.2.2"Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
>= 4.2, < 4.3.124.3.12pip install --upgrade "plone==4.3.12" -
>= 5.0, < 5.0.75.0.7pip install --upgrade "plone==5.0.7"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, administrators can restrict access to the affected getFile action by implementing access control rules or by disabling the action altogether. This can be achieved by modifying the Plone configuration or using a web application firewall (WAF) to block requests containing the path parameter with '..'. However, applying the workaround may impact the functionality of legitimate users who require access to the getFile action. It is recommended to apply the fix provided by upgrading to a fixed version of Plone CMS.
Conclusion
The directory traversal vulnerability in Plone CMS poses a significant risk to the confidentiality and integrity of affected installations. It allows remote administrators to read arbitrary files on the server, potentially leading to unauthorized disclosure of sensitive information. To mitigate this vulnerability, it is crucial to upgrade to a fixed version of Plone CMS and apply the necessary security patches and updates. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for plone →
FAQ
The vulnerability allows remote administrators to read arbitrary files on the server, potentially leading to unauthorized disclosure of sensitive information.
Yes, remote administrators can exploit this vulnerability by sending specially crafted requests to the affected Plone CMS installation.
There have been no known instances of this vulnerability being exploited in the wild. However, it is crucial to apply the necessary security patches and updates to mitigate the risk of exploitation.
Yes, administrators can implement access control rules or disable the affected getFile action as a temporary workaround. However, it is recommended to apply the fix provided by upgrading to a fixed version of Plone CMS.
For more information about this vulnerability, you can refer to the official advisory provided by the Plone CMS team or the CVE entry (CVE-2016-7135). It is also recommended to stay updated with the latest security news and announcements.
Related vulnerabilities
Recent vulnerabilities recorded for plone.
