PyPI/plone CVE-2017-1000481: unknown, EPSS 0.69%
When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tr
Action: Upgrade plone to 4.3.16 or later.
pip install plone==4.3.16pip install plone==5.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5 | 4.3.16 | - |
| 5 | 5.1.0 | - |
Fixed versions
| 4.3.16 | 5.1.0 |
Sources
- osv: PYSEC-2018-70
- https://plone.org/security/hotfix/20171128/open-redirection-on-login-form
- https://github.com/advisories/GHSA-8g72-gq68-6gqh
CVE-2017-1000481 · published · modified · JSON