Lucene search
GoogleOSV:GHSA-2C8C-84W2-J38JHistoryApr 07, 2021 - 9:14 p.m.
Improper Restriction of XML External Entity Reference in Plone
2021-04-0721:14:00
Google
osv.dev
8
0.003 Low
EPSS
Percentile
68.5%
Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).
Related
cve
cve
CVE-2020-28736
2020-12-30 19:15:13
osv
osv
CVE-2020-28736
2020-12-30 19:15:13
PYSEC-2020-248
2020-12-30 19:15:00
nvd
nvd
CVE-2020-28736
2020-12-30 19:15:13
github
github
Improper Restriction of XML External Entity Reference in Plone
2021-04-07 21:14:00
cvelist
cvelist
CVE-2020-28736
2020-12-30 18:40:52
prion
prion
Design/Logic Flaw
2020-12-30 19:15:00
veracode
veracode
XML External Entity (XXE)
2021-01-01 06:46:28
openvas
openvas
Plone CMS < 5.2.3 Multiple Vulnerabilities
2021-01-15 00:00:00