Skip to content
OpenAdvisories

Package · PyPI

plone

101 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2015-7293 Public exploit

    Plone vulnerable to cross-site request forgery

    Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.

    plone PyPI
  • High 7.5
    CVE-2013-4200 Public exploit

    Plone Open Redirection vulnerability via next parameter

    The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allow_external_login_sites fi…

    plone PyPI