CVE-2013-4195

Опубликовано: 11 мар. 2014

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:plone:plone:2.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.5:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.5.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.5.4:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:2.5.5:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.0:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.1.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.1.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.1.4:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.1.6:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.1.7:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.2.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.2.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.2.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:plone:plone:4.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.3.1:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.2.4:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00285

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-j67j-8hrp-76xm

CVSS3: 4.7

github

больше 3 лет назад

Plone Multiple open redirect vulnerabilities

EPSS

Процентиль: 52%

0.00285

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-20