45 matches found
EUVD-2014-0063
Malware in sbrugna...
EUVD-2014-0082
Malware in sbrugna...
EUVD-2014-0054
Malware in sbrugna...
EUVD-2014-0046
Malware in sbrugna...
EUVD-2021-0192
Malware in sbrugna...
EUVD-2021-0199
Malware in sbrugna...
EUVD-2014-0064
Malware in sbrugna...
EUVD-2014-0078
Malware in sbrugna...
EUVD-2017-0088
Malware in sbrugna...
EUVD-2020-0147
Malware in sbrugna...
EUVD-2014-0050
Malware in sbrugna...
EUVD-2014-0084
Malware in sbrugna...
EUVD-2018-0116
Malware in sbrugna...
EUVD-2017-0090
Malware in sbrugna...
CVE-2024-22889
Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...
CVE-2021-32806
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1.2.0 have an Open Redirect vulnerability. Various parts of Plone use the 'is url in portal' check for security, mostly to see if it is safe to redirect to a url. A url like...
CVE-2024-22889
Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...
GHSA-8W54-22W9-3G8F Cross-site Scripting and Open Redirect in Products.CMFPlone
Impact Plone is vulnerable to reflected cross site scripting and open redirect when an attacker can get a compromised version of the imageviewfullscreen page in a cache, for example in Varnish. The technique is known as cache poisoning. Any later visitor can get redirected when clicking on a link...
GHSA-Q3M9-9FJ2-MFWR URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
Impact Various parts of Plone use the 'is url in portal' check for security, mostly to see if it is safe to redirect to a url. A url like https://example.org is not in the portal. But the url https:example.org without slashes tricks our code and it is considered to be in the portal. When...
PYSEC-2021-323
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1.2.0 have an Open Redirect vulnerability. Various parts of Plone use the 'is url in portal' check for security, mostly to see if it is safe to redirect to a url. A url like...