CVE-2021-33510

Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file...

CVE-2021-33510

Plone CMS with versions up to 5.2.4 is affected by a server-side request forgery (SSRF) vulnerability allowing remote authenticated managers to fetch an event iCal URL and read one line of a file. The root cause is an SSRF flaw in handling the event iCal URL, leading to data exposure. The provide...