Описание
An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | conga | Out of support scope |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-601
https://bugzilla.redhat.com/show_bug.cgi?id=1798205plone: open redirection on the login form and possibly other places
EPSS
Процентиль: 56%
0.0034
Низкий
6.1 Medium
CVSS3
Связанные уязвимости
CVSS3: 6.1
nvd
около 6 лет назад
An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site.
EPSS
Процентиль: 56%
0.0034
Низкий
6.1 Medium
CVSS3