Skip to content
OpenAdvisories

Package · PyPI

products-pluggableauthservice

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-33507

    Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone

    Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.

    plone products-pluggableauthservice products-cmfcore PyPI
  • Medium 5.7
    CVE-2021-21337 Public exploit

    URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService

    Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality c…

    zopefoundation Products.PluggableAuthService products-pluggableauthservice PyPI
  • Medium 6.5
    CVE-2021-21336

    Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager

    Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Rol…

    zopefoundation Products.PluggableAuthService products-pluggableauthservice PyPI