CVE-2021-33926
2 advisories.
PyPI/plone CVE-2021-33926: high 8.8
Server-Side Request Forgery in Plone CMS
Action: Upgrade plone to 5.2.5 or later.
pip install plone==5.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.3 | 5.2.5 | - |
Fixed versions
| 5.2.5 |
Sources
- osv: GHSA-47p5-p3jw-w78w
- https://nvd.nist.gov/vuln/detail/CVE-2021-33926
- https://github.com/plone/Plone
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2023-289.yaml
- https://github.com/s-kustm/Subodh/blob/master/Plone%205.2.4%20Vulnerable%20to%20bilend%20SSRF.pdf
- https://plone.org/security/hotfix/20210518
- https://plone.org/security/hotfix/20210518/blind-ssrf-via-feedparser-accessing-an-internal-url
CVE-2021-33926 · published · modified · JSON
PyPI/plone CVE-2021-33926: high 8.8
An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3, 5.1b2, 5.1a2, 5.1a1, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.2, 5.1.1 5.1, 5.0rc3, 5.0rc2, 5.0rc1, 5.0.9, 5.0.8, 5.0.7
Action: Upgrade plone to 5.2.5 or later.
pip install plone==5.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.3 | 5.2.5 | - |
Fixed versions
| 5.2.5 |
Sources
- osv: PYSEC-2023-289
- https://github.com/s-kustm/Subodh/blob/master/Plone%205.2.4%20Vulnerable%20to%20bilend%20SSRF.pdf
- https://plone.org/security/hotfix/20210518/blind-ssrf-via-feedparser-accessing-an-internal-url
- https://plone.org/security/hotfix/20210518
CVE-2021-33926 · published · modified · JSON