CVE-2021-32806
2 advisories.
PyPI/products-isurlinportal CVE-2021-32806: medium 6.5, EPSS 1.03%
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
Action: Upgrade products-isurlinportal to 1.2.0 or later.
pip install products-isurlinportal==1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GHSA-q3m9-9fj2-mfwr
- https://github.com/plone/Products.isurlinportal/security/advisories/GHSA-q3m9-9fj2-mfwr
- https://nvd.nist.gov/vuln/detail/CVE-2021-32806
- https://github.com/plone/Products.isurlinportal/commit/d4fd34990d18adf05a10dc5e2bb4b066798280ba
- https://github.com/plone/Products.isurlinportal
- https://github.com/pypa/advisory-database/tree/main/vulns/products-isurlinportal/PYSEC-2021-323.yaml
- http://jvn.jp/en/jp/JVN50804280/index.html
CVE-2021-32806 · published · modified · JSON
PyPI/products-isurlinportal CVE-2021-32806: unknown, EPSS 1.03%
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1.2.0 have an Open Redirect vulnerability. Various parts of Plone use the 'is url
Action: Upgrade products-isurlinportal to 1.2.0 or later.
pip install products-isurlinportal==1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: PYSEC-2021-323
- https://github.com/plone/Products.isurlinportal/commit/d4fd34990d18adf05a10dc5e2bb4b066798280ba
- https://github.com/plone/Products.isurlinportal/security/advisories/GHSA-q3m9-9fj2-mfwr
- http://jvn.jp/en/jp/JVN50804280/index.html
CVE-2021-32806 · published · modified · JSON