CVE-2013-4195

CVE-2013-4195 (Plone) is a set of multiple open redirect vulnerabilities in modules marmoset_patch.py, publish.py, and principiaredirect.py affecting Plone 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. The underlying issue is open redirects that let remote attackers redirect users to arbitrary sites, en...

CVE-2013-4190

CVE-2013-4190 : Multiple XSS vulnerabilities in Plone components (spamProtect.py, pts.py, request.py) affect Plone 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. The root cause is unsanitized input allowing injection of arbitrary script/HTML via unspecified vectors. Corresponding advisories indicate a ho...

CVE-2013-4199

1 cbdecode.py and 2 linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service resource consumption via a large zip archive, which is expanded decompressed...

CVE-2013-4190

Multiple cross-site scripting XSS vulnerabilities in 1 spamProtect.py, 2 pts.py, and 3 request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4188

traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service infinite loop and resource consumption via unspecified vectors related to "retrieving information for certain resources."...

CVE-2013-4200

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

PYSEC-2014-64

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

Authentication flaw

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

PYSEC-2014-64

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

CVE-2013-4200

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

CVE-2013-4200

Plone CVE-2013-4200 targets the isURLInPortal method of URLTool in in_portal.py. It incorrectly treats URLs starting with a space as relative, bypassing the allow_external_login_sites filter and enabling open redirection via the next parameter to acl_users/credentials_cookie_auth/require_login. A...

PT-2014-2763 · Plone Foundation · Plone

Name of the Vulnerable Software and Affected Versions: Plone versions 2.1 through 4.1 Plone versions 4.2.x through 4.2.5 Plone versions 4.3.x through 4.3.1 Description: The issue allows remote attackers to bypass filtering and redirect users to arbitrary web sites, potentially conducting phishing...

CVE-2013-4200 - Plone URL redirection / Forwarding of cookie data (session hijack) in certain browsers

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Plone CMS Vendor: Plone Foundation http://plone.org IDs: CSNC-2013-013, CVE-2013-4200 Subject: URL Redirection Vulnerability Risk: High Effect: Remotely exploitable Author: Cyrill Bannwart [email protected]...

CVE-2013-6430 Possible XSS when using Spring MVC

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Plone CMS Vendor: Plone Foundation http://plone.org IDs: CSNC-2013-013, CVE-2013-4200 Subject: URL Redirection Vulnerability Risk: High Effect: Remotely exploitable Author: Cyrill Bannwart [email protected]...

Plone CMS Credential Disclosure

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Plone CMS Vendor: Plone Foundation http://plone.org IDs: CSNC-2013-013, CVE-2013-4200 Subject: URL Redirection Vulnerability Risk: High Effect: Remotely exploitable Author: Cyrill Bannwart Date: 20/05/2013...

Vulnerabilities in plugins for WordPress, Joomla and Plone with Dewplayer

Hello 3APA3A! These are Content Spoofing and Cross-Site Scripting vulnerabilities in plugins for WordPress, Joomla and Plone with Dewplayer. Earlier I wrote about vulnerabilities in Dewplayer http://seclists.org/fulldisclosure/2013/Dec/192. This is media player, which is used at thousands web sit...

Plone - in_portal.py 4.1.3 Session Hijacking

Plone - inportal.py 4.1.3 Session Hijacking source: https://www.securityfocus.com/bid/61964/info Plone is prone to a session-hijacking vulnerability. An attacker can exploit this issue to hijack user sessions and gain unauthorized access to the affected application. Note: This issue was previousl...

Plone - 'in_portal.py' < 4.1.3 Session Hijacking

source: https://www.securityfocus.com/bid/61964/info Plone is prone to a session-hijacking vulnerability. An attacker can exploit this issue to hijack user sessions and gain unauthorized access to the affected application. Note: This issue was previously discussed in the BID 61544 Plone Multiple...

Plone spamProtect mailaddress Parameter XSS

The version of Plone installed on the remote web server is affected by a cross-site scripting vulnerability because it fails to properly sanitize input to the 'mailaddress' parameter of the 'spamProtect.py' script. An attacker may be able to leverage this to inject arbitrary HTML and script code...

Plone CMS 'PloneFormGen' Add-On 1.7.4 - 1.7.8 Arbitrary Code Execution Vulnerability

The PloneFormGen add-on of Plone CMS is prone to an arbitrary code execution vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...