Plone Open Redirection vulnerability via next parameter

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

CVE-2013-4200

Plone CVE-2013-4200 targets the isURLInPortal method of URLTool in in_portal.py. It incorrectly treats URLs starting with a space as relative, bypassing the allow_external_login_sites filter and enabling open redirection via the next parameter to acl_users/credentials_cookie_auth/require_login. A...

Plone - 'in_portal.py' < 4.1.3 Session Hijacking

source: https://www.securityfocus.com/bid/61964/info Plone is prone to a session-hijacking vulnerability. An attacker can exploit this issue to hijack user sessions and gain unauthorized access to the affected application. Note: This issue was previously discussed in the BID 61544 Plone Multiple...