Description
Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | <= 5.2.4 | — | GHSA-4mg4-wvmx-5332 |
| PyPI | plone | < 5.2.5 | 5.2.5 | PYSEC-2021-82 |