CVE-2021-32806

creationtimestamp| type| source ---|---|--- 2021-08-02 22:27:46+00:00| seen| https://t.me/cibsecurity/26695...

CVE-2021-32806 URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal

Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1.2.0 have an Open Redirect vulnerability. Various parts of Plone use the 'is url in portal' check for security, mostly to see if it is safe to redirect to a url. A url like...

CVE-2021-32806

CVE-2021-32806 affects Plone via Products.isurlinportal, where versions prior to 1.2.0 allow an open redirect by treating certain crafted URLs (e.g., https:example.org) as in-portal. This misclassification enables redirects to arbitrary sites, enabling phishing risk. The issue is mitigated by pat...