If you have been paying attention to Plone checkins, you might have noticed some checkins mentioning CSRF (Cross-Site Request Forgery) flying by. Today Secunia released an advisory about the issue.
As can be seen from the referenced paper, web technologies make some things just way too simple to hack around.
On a unrelated note, call me luddite, but I really think moving our life to the cloud presents way more unforeseen threats than our little brains can imagine.
Sidnei Silva 
well, the attack was known but a lot of time, and wasn’t fixed. This is a shame, I think.
actually, the paper was already released last thursday — see http://www.securityfocus.com/archive/1/489544
and work on a hotfix is in progress…
cheers,
andi