EUVD-2014-0082

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

URLTool allows attack bypass via URLs with leading spaces, risking phishing through redirecting.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2013-4200	31 Jul 201300:00	–	circl
CVE	CVE-2013-4200	21 Jan 201416:00	–	cve
Cvelist	CVE-2013-4200	21 Jan 201416:00	–	cvelist
Github Security Blog	Plone Open Redirection vulnerability via next parameter	14 May 202202:54	–	github
NVD	CVE-2013-4200	21 Jan 201416:06	–	nvd
OSV	GHSA-56P3-RRP4-2J82 Plone Open Redirection vulnerability via next parameter	14 May 202202:54	–	osv
OSV	PYSEC-2014-64	21 Jan 201416:06	–	osv
Packet Storm	Plone CMS Credential Disclosure	17 Jan 201400:00	–	packetstorm
Prion	Authentication flaw	21 Jan 201416:06	–	prion
Positive Technologies	PT-2014-2763 · Plone Foundation · Plone	21 Jan 201400:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "3d26c940-a28c-3105-8abd-4c9bdd7a82bd",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f0fa0064-ce68-38c0-80ca-7374bd4e6123",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
plone	www.plone.org/products/plone/security/advisories/20130618-announcement
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2013/08/01/2
plone	www.plone.org/products/plone-hotfix/releases/20130618
securityfocus	www.securityfocus.com/archive/1/530787/100/0/threaded
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-4200
github	www.github.com/plone/Plone
github	www.github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-64.yaml
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2013-4200
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25.8

EPSS0.05344