6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.7%
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.