Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

plone/plone.app.dexterity

              master @ 868325f
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

plone.app.dexterity/permissions.py: most-fixed (2 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: A critical vulnerability was found where the SchemaTraverser traversal class used a highly insecure dynamic 'exec' statement to import interfaces. This allowed arbitrary code execution in the context of the running application during routing traversal.

Auth Bypass: The dexterity form field permission checker originally only supported add forms and checked permissions against the incorrect parent container context rather than a temporary instance of the target content type, leading to field-level authorization bypasses on edit/display forms.

Auth Bypass: Insecure browser page publications allowed unauthorized users to traverse and bypass permission gates on highly sensitive dexterity type-editing and schema-editing configurations.