CVE-2016-7137

🗓️ 07 Mar 2017 16:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 61 Views🌐 WEB

CVE-2016-7137 Open redirect vuln in Plone CMS 5.x, 4.x, 3.3.

Reporter	Title	Published	Views	Family All 15
CNVD	plone open redirect vulnerability	6 Sep 201600:00	–	cnvd
Cvelist	CVE-2016-7137	7 Mar 201716:00	–	cvelist
EUVD	EUVD-2017-0093	7 Oct 202500:30	–	euvd
Github Security Blog	Plone Open Redirect Vulnerability	14 May 202202:46	–	github
NVD	CVE-2016-7137	7 Mar 201716:59	–	nvd
OpenVAS	Plone CMS < 4.3.12, 5.x < 5.0.7 Multiple Vulnerabilities	31 Oct 201600:00	–	openvas
OSV	GHSA-69VH-662J-V988 Plone Open Redirect Vulnerability	14 May 202202:46	–	osv
OSV	PYSEC-2017-60	7 Mar 201716:59	–	osv
Packet Storm	Plone CMS 4.3.11 / 5.0.6 XSS / Traversal / Open Redirection	12 Oct 201600:00	–	packetstorm
Prion	Open redirect	7 Mar 201716:59	–	prion

NVD

Node

plone ploneMatch3.3

OR

plone ploneMatch3.3.1

OR

plone ploneMatch3.3.2

OR

plone ploneMatch3.3.3

OR

plone ploneMatch3.3.4

OR

plone ploneMatch3.3.5

OR

plone ploneMatch3.3.6

OR

plone ploneMatch4.0

OR

plone ploneMatch4.0.1

OR

plone ploneMatch4.0.2

OR

plone ploneMatch4.0.3

OR

plone ploneMatch4.0.4

OR

plone ploneMatch4.0.5

OR

plone ploneMatch4.0.7

OR

plone ploneMatch4.0.8

OR

plone ploneMatch4.0.9

OR

plone ploneMatch4.0.10

OR

plone ploneMatch4.1

OR

plone ploneMatch4.1.1

OR

plone ploneMatch4.1.2

OR

plone ploneMatch4.1.3

OR

plone ploneMatch4.1.4

OR

plone ploneMatch4.1.5

OR

plone ploneMatch4.1.6

OR

plone ploneMatch4.2

OR

plone ploneMatch4.2.1

OR

plone ploneMatch4.2.2

OR

plone ploneMatch4.2.3

OR

plone ploneMatch4.2.4

OR

plone ploneMatch4.2.5

OR

plone ploneMatch4.2.6

OR

plone ploneMatch4.2.7

OR

plone ploneMatch4.3

OR

plone ploneMatch4.3.1

OR

plone ploneMatch4.3.2

OR

plone ploneMatch4.3.3

OR

plone ploneMatch4.3.4

OR

plone ploneMatch4.3.5

OR

plone ploneMatch4.3.6

OR

plone ploneMatch4.3.7

OR

plone ploneMatch4.3.8

OR

plone ploneMatch4.3.9

OR

plone ploneMatch4.3.10

OR

plone ploneMatch4.3.11

OR

plone ploneMatch5.0

OR

plone ploneMatch5.0a1

OR

plone ploneMatch5.0rc1

OR

plone ploneMatch5.0rc2

OR

plone ploneMatch5.0rc3

OR

plone ploneMatch5.0.1

OR

plone ploneMatch5.0.2

OR

plone ploneMatch5.0.3

OR

plone ploneMatch5.0.4

OR

plone ploneMatch5.0.5

OR

plone ploneMatch5.0.6

OR

plone ploneMatch5.1a1

Source	Link
openwall	www.openwall.com/lists/oss-security/2016/09/05/5
securityfocus	www.securityfocus.com/bid/92752
plone	www.plone.org/security/hotfix/20160830/open-redirection-in-plone
packetstormsecurity	www.packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
seclists	www.seclists.org/fulldisclosure/2016/Oct/80
openwall	www.openwall.com/lists/oss-security/2016/09/05/4
securityfocus	www.securityfocus.com/archive/1/539572/100/0/threaded

Parameter	Position	Path	Description	CWE
Referer	header	Plone/%2b%2bgroupdashboard%2b%2bplone.dashboard1%2bgroup/%2b/portlets.Actions	Open redirection via referer parameter in portlets.Actions endpoint	CWE-601
Referer	header	Plone/folder/%2b%2bcontextportlets%2b%2bplone.footerportlets/%2b/portlets.Actions	Open redirection via referer parameter in portlets.Actions endpoint	CWE-601
came_from	query param	Plone/login_form	Open redirection via came_from parameter on login_form	CWE-601

13 May 2026 00:24Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25.8

CVSS 36.1

EPSS0.00477

cve 2016 7137 open redirect plone cms vulnerability