CVE-2013-4190

CVE-2013-4190 : Multiple XSS vulnerabilities in Plone components (spamProtect.py, pts.py, request.py) affect Plone 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. The root cause is unsanitized input allowing injection of arbitrary script/HTML via unspecified vectors. Corresponding advisories indicate a ho...

CVE-2013-4193

The CVE-2013-4193 entry concerns Plone: the component typeswidget.py in Plone versions 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1 fails to enforce the immutable setting on unspecified content edit forms, allowing remote attackers to hide fields on the forms through a crafted URL. This is corroborated ...

CVE-2013-4199

CVE-2013-4199 affects Plone: cb_decode.py and linkintegrity.py across Plone 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. Remote authenticated users can trigger a denial of service by decompressing a large zip archive, consuming resources (resource exhaustion). No explicit remediation is provided in the...

CVE-2013-4198

The CVE-2013-4198 entry applies to Plone: mail_password.py in Plone 2.1–4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1. The vulnerability allows remote authenticated users to bypass the prohibition on password changes via the forgotten-password email flow. Affected component/function/file: mai...

CVE-2013-4189

Multiple unspecified vulnerabilities in 1 dataitems.py, 2 get.py, and 3 traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors...

CVE-2013-4196

The object manager implementation objectmanager.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote attackers to obtain sensitive information via a crafted request...

CVE-2013-4199

1 cbdecode.py and 2 linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service resource consumption via a large zip archive, which is expanded decompressed...

CVE-2013-4193

typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote attackers to hide fields on the forms via a crafted URL...

CVE-2013-4188

traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service infinite loop and resource consumption via unspecified vectors related to "retrieving information for certain resources."...

CVE-2013-4188

CVE-2013-4188 affects Plone 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. The issue enables remotely authenticated attackers with administrator privileges to trigger a denial of service (infinite loop and resource consumption) through unspecified vectors related to “retrieving information for certain re...

CVE-2013-4194

The CVE-2013-4194 entry concerns the WYSIWYG component (wysiwyg.py) in Plone versions 2.1–4.1, 4.2.x up to 4.2.5, and 4.3.x up to 4.3.1. The connected GHSA advisory and OSV entries corroborate that remote attackers can obtain sensitive information by crafting a URL that causes an error message to...

CVE-2013-4195

CVE-2013-4195 (Plone) is a set of multiple open redirect vulnerabilities in modules marmoset_patch.py, publish.py, and principiaredirect.py affecting Plone 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. The underlying issue is open redirects that let remote attackers redirect users to arbitrary sites, en...

CVE-2013-4194

The WYSIWYG component wysiwyg.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message...

CVE-2013-4200

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

Authentication flaw

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

PYSEC-2014-64

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

PYSEC-2014-64

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

CVE-2013-4200

Plone CVE-2013-4200 targets the isURLInPortal method of URLTool in in_portal.py. It incorrectly treats URLs starting with a space as relative, bypassing the allow_external_login_sites filter and enabling open redirection via the next parameter to acl_users/credentials_cookie_auth/require_login. A...

CVE-2013-4200

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

PT-2014-2763 · Plone Foundation · Plone

Name of the Vulnerable Software and Affected Versions: Plone versions 2.1 through 4.1 Plone versions 4.2.x through 4.2.5 Plone versions 4.3.x through 4.3.1 Description: The issue allows remote attackers to bypass filtering and redirect users to arbitrary web sites, potentially conducting phishing...