Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

plone isurlinportal vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2021-32806
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal before 1.2.0 have an Open Redirect vulnerability. Various parts of Plone use the 'is url in portal' check for security, mostly to see if it is safe to redirect ...
Plone Isurlinportal
5.8
CVSSv2
CVE-2013-4200
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 treats URLs starting with a space as a relative URL, which allows remote malicious users to bypass the allow_ex...
Plone Plone 3.3Plone Plone 4.0.5Plone Plone 3.0.1Plone Plone 3.0Plone Plone 3.2.3Plone Plone 3.1.4Plone Plone 3.1.5.1Plone Plone 2.1.4Plone Plone 4.0.2Plone Plone 3.3.5Plone Plone 3.0.6Plone Plone 3.2Plone Plone 3.1.1Plone Plone 2.1.1Plone Plone 3.3.4Plone Plone 3.3.2Plone Plone 4.0.4Plone Plone 3.1.7Plone Plone 4.1Plone Plone 3.2.2Plone Plone 2.1.2Plone Plone 3.0.3
5.8
CVSSv2
CVE-2017-1000481
When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by letting you...
Plone Plone 5.0Plone Plone 5.1Plone Plone 5.0.9Plone Plone 5.0.8Plone Plone 5.0.7Plone Plone 4.3.8Plone Plone 4.3.7Plone Plone 4.3.6Plone Plone 4.3.5Plone Plone 4.1.6Plone Plone 4.1.5Plone Plone 4.1.4Plone Plone 4.1.3Plone Plone 4.0Plone Plone 3.3.6Plone Plone 3.3.5Plone Plone 3.3.4Plone Plone 3.3.3Plone Plone 5.0.1Plone Plone 4.3.15Plone Plone 4.3.14Plone Plone 4.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook