CVE-2020-28735

creationtimestamp| type| source ---|---|--- 2026-07-07 21:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3j4zaqre2f...

CVE-2020-28735

Plone before 5.2.3 allows SSRF attacks via the tracebacks feature only available to the Manager role...

CVE-2020-28735

CVE-2020-28735 affects Plone versions before 5.2.3, where the tracebacks feature (accessible to the Manager role) enables SSRF attacks. The issue is described across multiple sources as a vulnerability in Plone prior to 5.2.3 that allows server-side request forgery via tracebacks. Remediation is ...