~ / search / GHSA-j67j-8hrp-76xm

GHSA-j67j-8hrp-76xm

Plone Multiple open redirect vulnerabilities

Source: GitHub Advisory Database (reviewed) Low CVE-2013-4195

Packages

EcosystemPackageAffectedFixed in
PyPI Plone >= 2.1, < 4.1.1 4.1.1
PyPI Plone >= 4.2, < 4.2.6 4.2.6
PyPI Plone >= 4.3, < 4.3.2 4.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.