4 matches found
GHSA-GC9G-67CQ-P7V4 Server-Side Request Forgery in Plone
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel...
8.7CVSS7.5AI score0.0115EPSS
SaveExploits0References6
CVE-2021-33511
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel...
7.5CVSS0.0115EPSS
SaveExploits0References2
20