{"action":"Upgrade plone to 5.2.5 or later.","affected":[{"fixed":"5.2.5","introduced":"4.3"}],"component":"plone","cve_ids":["CVE-2021-33926"],"ecosystem":"PyPI","epss":0.01013,"exploited":false,"fixed_versions":["5.2.5"],"ghsa_id":"GHSA-47p5-p3jw-w78w","id":"tcs_01M5KGKB76YAPP4CEG20F8WZCM","modified_at":"2024-11-25T22:42:24.918778Z","published_at":"2023-02-17T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-289","https://github.com/s-kustm/Subodh/blob/master/Plone%205.2.4%20Vulnerable%20to%20bilend%20SSRF.pdf","https://plone.org/security/hotfix/20210518/blind-ssrf-via-feedparser-accessing-an-internal-url","https://plone.org/security/hotfix/20210518"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2023-289","url":"https://osv.dev/vulnerability/PYSEC-2023-289"}],"summary":"An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3, 5.1b2, 5.1a2, 5.1a1, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.2, 5.1.1 5.1, 5.0rc3, 5.0rc2, 5.0rc1, 5.0.9, 5.0.8, 5.0.7"}