CVE:CVE-2022-24740
CNNVD:CNNVD-202203-1391
Volto是一个Plone 内容管理系统的基于 React 的前端。
Volto 存在授权问题漏洞，该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。
solution:Upgrade plone volto to a higher version than 14.10.0,14.0.0,14.0.0:alpha10,14.0.0:alpha11,14.0.0:alpha12,14.0.0:alpha13,14.0.0:alpha14,14.0.0:alpha15,14.0.0:alpha16,14.0.0:alpha17,14.0.0:alpha18,14.0.0:alpha19,14.0.0:alpha20,14.0.0:alpha21,14.0.0:alpha22,14.0.0:alpha23,14.0.0:alpha24,14.0.0:alpha25,14.0.0:alpha26,14.0.0:alpha27,14.0.0:alpha28,14.0.0:alpha29,14.0.0:alpha30,14.0.0:alpha31,14.0.0:alpha32,14.0.0:alpha33,14.0.0:alpha34,14.0.0:alpha35,14.0.0:alpha36,14.0.0:alpha37,14.0.0:alpha38,14.0.0:alpha39,14.0.0:alpha40,14.0.0:alpha41,14.0.0:alpha42,14.0.0:alpha43,14.0.0:alpha6,14.0.0:alpha7,14.0.0:alpha8,14.0.0:alpha9,15.0.0:alpha0,and avoid the version [14.1.0,14.10.0],14.0.0,14.0.0:alpha10,14.0.0:alpha11,14.0.0:alpha12,14.0.0:alpha13,14.0.0:alpha14,14.0.0:alpha15,14.0.0:alpha16,14.0.0:alpha17,14.0.0:alpha18,14.0.0:alpha19,14.0.0:alpha20,14.0.0:alpha21,14.0.0:alpha22,14.0.0:alpha23,14.0.0:alpha24,14.0.0:alpha25,14.0.0:alpha26,14.0.0:alpha27,14.0.0:alpha28,14.0.0:alpha29,14.0.0:alpha30,14.0.0:alpha31,14.0.0:alpha32,14.0.0:alpha33,14.0.0:alpha34,14.0.0:alpha35,14.0.0:alpha36,14.0.0:alpha37,14.0.0:alpha38,14.0.0:alpha39,14.0.0:alpha40,14.0.0:alpha41,14.0.0:alpha42,14.0.0:alpha43,14.0.0:alpha6,14.0.0:alpha7,14.0.0:alpha8,14.0.0:alpha9,15.0.0:alpha0