CVE-2021-33926

🗓️ 17 Feb 2023 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 57 Views

An issue in Plone CMS v. 5.x allows attacker to access sensitive information via the RSS feed portlet

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-33926	17 Feb 202320:13	–	circl
CNNVD	Plone 代码问题漏洞	17 Feb 202300:00	–	cnnvd
Cvelist	CVE-2021-33926	17 Feb 202300:00	–	cvelist
EUVD	EUVD-2023-0204	3 Oct 202520:07	–	euvd
Github Security Blog	Server-Side Request Forgery in Plone CMS	17 Feb 202318:30	–	github
NVD	CVE-2021-33926	17 Feb 202318:15	–	nvd
OpenVAS	Plone CMS 4.3.0 <= 5.2.4 Information Disclosure Vulnerability	21 Feb 202300:00	–	openvas
OSV	GHSA-47P5-P3JW-W78W Server-Side Request Forgery in Plone CMS	17 Feb 202318:30	–	osv
OSV	PYSEC-2023-289	17 Feb 202318:15	–	osv
Prion	Code injection	17 Feb 202318:15	–	prion

NVD

Node

plone ploneMatch4.3

OR

plone ploneMatch4.3.1

OR

plone ploneMatch4.3.2

OR

plone ploneMatch4.3.3

OR

plone ploneMatch4.3.4

OR

plone ploneMatch4.3.5

OR

plone ploneMatch4.3.6

OR

plone ploneMatch4.3.7

OR

plone ploneMatch4.3.8

OR

plone ploneMatch4.3.9

OR

plone ploneMatch4.3.10

OR

plone ploneMatch4.3.11

OR

plone ploneMatch4.3.12

OR

plone ploneMatch4.3.14

OR

plone ploneMatch4.3.15

OR

plone ploneMatch4.3.17

OR

plone ploneMatch4.3.18

OR

plone ploneMatch4.3.19

OR

plone ploneMatch4.3.20

OR

plone ploneMatch5.0-

OR

plone ploneMatch5.0rc1

OR

plone ploneMatch5.0rc2

OR

plone ploneMatch5.0rc3

OR

plone ploneMatch5.0.1

OR

plone ploneMatch5.0.2

OR

plone ploneMatch5.0.3

OR

plone ploneMatch5.0.4

OR

plone ploneMatch5.0.5

OR

plone ploneMatch5.0.6

OR

plone ploneMatch5.0.7

OR

plone ploneMatch5.0.8

OR

plone ploneMatch5.0.9

OR

plone ploneMatch5.0.10

OR

plone ploneMatch5.1alpha2

OR

plone ploneMatch5.1.1

OR

plone ploneMatch5.1.2

OR

plone ploneMatch5.1.4

OR

plone ploneMatch5.1.5

OR

plone ploneMatch5.1.6

OR

plone ploneMatch5.1.7

OR

plone ploneMatch5.1a1alpha1

OR

plone ploneMatch5.1a2beta4

OR

plone ploneMatch5.1b2beta3

OR

plone ploneMatch5.1b3beta2

OR

plone ploneMatch5.1b4rc2

OR

plone ploneMatch5.1rc1rc1

OR

plone ploneMatch5.1rc2-

OR

plone ploneMatch5.2.0

OR

plone ploneMatch5.2.1

OR

plone ploneMatch5.2.2

OR

plone ploneMatch5.2.3

OR

plone ploneMatch5.2.4

Source	Link
plone	www.plone.org/security/hotfix/20210518
github	www.github.com/s-kustm/Subodh/blob/master/Plone%205.2.4%20Vulnerable%20to%20bilend%20SSRF.pdf
plone	www.plone.org/security/hotfix/20210518/blind-ssrf-via-feedparser-accessing-an-internal-url

19 Mar 2025 15:15Current

8.3High risk

Vulners AI Score8.3

CVSS 3.18.8

EPSS0.00501

SSVC

cve-2021-33926 plone cms security issue rss feed information disclosure