high8.8
CVE-2020-28735
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
Impact
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plone | Plone | before 5.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
- https://github.com/plone/Products.CMFPlone/issues/3209
- https://www.misakikata.com/codes/plone/python-en.html
- https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
- https://github.com/plone/Products.CMFPlone/issues/3209
- https://www.misakikata.com/codes/plone/python-en.html