Iniciar sesión
Deutsch English Español Polski
Alta

The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows r

  • Publicada: 21.01.2014
  • Actualizado: 11.10.2026 12:20

The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allow_external_login_sites filtering property, redirect users to arbitrary web sites, and conduct phishing attacks via a space before a URL in the "next" parameter to acl_users/credentials_cookie_auth/require_login.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Python (PyPI) plone >= 2.1, < 4.1.1, >= 4.2, < 4.2.6, >= 4.3, < 4.3.2 4.1.1, 4.2.6, 4.3.2

Referencias

Puntuación CVSS 7.5/10
Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Debilidad (CWE)
CWE-601
Plataforma
Python (PyPI)
Paquete
plone
Publicada
21.01.2014
Actualizado
11.10.2026 12:20

Fuentes y licencias

OSV / GitHub Advisory Database - GHSA-56p3-rrp4-2j82 - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2014-64 - PyPA Advisory Database; CC BY 4.0

Historial de vulnerabilidades: plone

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (101) en el archivo
Entradas en total
101
Primera → última
09.2006 03.2024
Sin corrección
10
Explotada en ataques
0

Distribución por gravedad

  • Crítica 5
  • Alta 36
  • Media 58
  • Baja 2

Divulgaciones por año

antes: 52

Gravedad:
  1. Cross-Frame Scripting vulnerability has been found on Plone CMS
    Alta · 7.1 CVE-2024-0669 < 6.0.7 6.0.7
  2. Server-Side Request Forgery in Plone CMS
    Alta · 8.8 CVE-2021-33926 >= 4.3, < 5.2.5 5.2.5
  3. Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
    Alta CVE-2011-4030 >= 4.0, < 4.0.10, >= 4.1, < 4.1.1, >= 4.2a1, < 4.2a3 4.0.10, 4.1.1, 4.2a3
  4. Plone Improper Session Management
    Alta CVE-2008-1393 < 3.0 3.0
  5. Plone CMS Improper Session Management
    Alta CVE-2008-1394 < 3.0 3.0
  6. Server-Side Request Forgery in Plone
    Alta · 7.5 CVE-2021-33511 <= 5.2.4 sin corrección
  7. Incorrect Permission Assignment for Critical Resource in Plone
    Crítica · 9.9 CVE-2021-33509 < 5.2.5 5.2.5
  8. Improper Restriction of XML External Entity Reference in Plone
    Alta · 8.8 CVE-2020-28736 < 5.2.3 5.2.3
  9. SSRF attacks via tracebacks in Plone
    Alta · 8.8 CVE-2020-28735 < 5.2.3 5.2.3
  10. Improper Restriction of XML External Entity Reference in Plone
    Alta · 8.8 CVE-2020-28734 < 5.2.3 5.2.3
  11. Plone Privilege Escallation
    Alta · 8.8 CVE-2020-7938 >= 5.2.0, < 5.2.2 5.2.2
  12. Plone Unauthenticated Write Vulnerability
    Crítica · 9.8 CVE-2020-7941 >= 4.3, <= 5.2.1 sin corrección
  13. SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
    Alta · 8.8 CVE-2020-7939 >= 4.0, < 5.2.2 5.2.2
  14. Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
    Alta · 7.5 CVE-2020-7940 >= 4.3, < 5.2.1 5.2.1
  15. Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part
    Alta · 6.5 CVE-2017-1000483 >= 2.5, < 4.3.16, >= 5, < 5.1.0 4.3.16, 5.1.0
  16. Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
    Alta · 8.8 CVE-2015-7293 < 5.0a1 5.0a1
  17. Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses.
    Alta · 7.5 CVE-2015-7318 >= 3.3, < 4.0a1 4.0a1
  18. Plone and Zope2 do not reseed pseudo-random number generator
    Alta · 7.5 CVE-2012-6661 >= 3.2.2, < 4.2.3, >= 4.3a1, < 4.3b1 4.2.3, 4.3b1
  19. at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types via a crafted URL.
    Alta · 7.5 CVE-2012-5501 < 4.2.3, >= 4.3a0, < 4.3b1 4.2.3, 4.3b1
  20. python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (memory consumption) via a large value, related to formatColumns.
    Alta · 7.5 CVE-2012-5499 < 4.2.3, >= 4.3a0, < 4.3b1 4.2.3, 4.3b1
  21. queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.
    Alta · 7.5 CVE-2012-5498 < 4.2.3, >= 4.3a0, < 4.3b1 4.2.3, 4.3b1
  22. registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.
    Alta · 7.2 CVE-2012-5485 < 4.2.3, >= 4.3a0, < 4.3b1 4.2.3, 4.3b1
  23. kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL.
    Alta · 7.5 CVE-2012-5496 < 3.3.6 3.3.6
  24. python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "go_back."
    Crítica · 9.8 CVE-2012-5495 < 4.2.3, >= 4.3a0, < 4.3b1 4.2.3, 4.3b1
  25. atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.
    Alta · 7.5 CVE-2012-5505 < 4.2.3, >= 4.3a0, < 4.3b1 4.2.3, 4.3b1
  26. python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permissio
    Alta · 7.5 CVE-2012-5506 < 4.2.3, >= 4.3a0, < 4.3b1 4.2.3, 4.3b1
  27. python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.
    Alta · 9.8 CVE-2012-5488 < 4.2.3, >= 4.3a0, < 4.3b1 4.2.3, 4.3b1
  28. Plone and Zope2 affected by Race Condition
    Alta · 7.5 CVE-2012-5507 >= 3.2.2, < 4.2.3, >= 4.3a1, < 4.3b1 4.2.3, 4.3b1
  29. Plone allows remote attackers to read hidden folder contents
    Alta · 7.5 CVE-2012-5503 < 4.2.3, >= 4.3a1, < 4.3b1 4.2.3, 4.3b1
  30. Plone and Zope2 vulnerable to unauthorized access to restricted attributes
    Alta · 6.5 CVE-2012-5489 >= 3.2.2, < 4.2.3, >= 4.3a1, < 4.3b1 4.2.3, 4.3b1
  31. HTTP header injection in Plone and Zope2
    Alta · 7.5 CVE-2012-5486 >= 3.3.2, < 4.2.3, >= 4.3a1, < 4.3b1 4.2.3, 4.3b1
  32. typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote attackers t
    Alta · 5.9 CVE-2013-4193 >= 2.1, < 4.1.1, >= 4.2, < 4.2.6, >= 4.3, < 4.3.2 4.1.1, 4.2.6, 4.3.2
  33. member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.
    Alta · 8.1 CVE-2013-4197 >= 2.1, < 4.1.1, >= 4.2, < 4.2.6, >= 4.3, < 4.3.2 4.1.1, 4.2.6, 4.3.2
  34. sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to spoof emails via unspecified vectors.
    Alta · 6.5 CVE-2013-4192 >= 2.1, < 4.1.1, >= 4.2, < 4.2.6, >= 4.3, < 4.3.2 4.1.1, 4.2.6, 4.3.2
  35. The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows r esta entrada
    Alta · 7.5 CVE-2013-4200 >= 2.1, < 4.1.1, >= 4.2, < 4.2.6, >= 4.3, < 4.3.2 4.1.1, 4.2.6, 4.3.2
  36. Plone Denial of Service vulnerability
    Alta · 7.5 CVE-2011-4462 < 4.1.4 4.1.4
  37. High severity vulnerability that affects Plone and Zope2
    Alta CVE-2011-2528 >= 3.3.2, < 3.3.6 3.3.6
  38. Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and
    Crítica · 9.1 CVE-2011-0720 < 4.0.1 4.0.1
  39. Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arb
    Alta · 7.5 CVE-2008-0164 < 3.1 3.1
  40. Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity modul
    Crítica · 9.8 CVE-2007-5741 >= 2.5, < 2.5.5, >= 3.0, < 3.0.3 2.5.5, 3.0.3
  41. Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security dec
    Alta · 9.1 CVE-2006-4247 >= 2.5, < 2.5.1 2.5.1

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.