Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2021-33510

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4mg4-wvmx-5332

Server-Side Request Forgery in Plone Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.

gitlab/pypi/Plone/CVE-2021-33510

Server-Side Request Forgery in Plone Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.

pypa/plone/PYSEC-2021-82

Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.

pysec/PYSEC-2021-82

Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.