Lucene search
GoogleOSV:GHSA-GC9G-67CQ-P7V4HistoryJun 15, 2021 - 4:12 p.m.
Server-Side Request Forgery in Plone
2021-06-1516:12:04
Google
osv.dev
10
plone
ssrf
diazo themes
dexterity ttw schemas
plone.app.theming
plone.app.dexterity
plone.supermodel
lxml.parser security issue
EPSS
0.002
Percentile
55.1%
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.
Related
osv
osv
CVE-2021-33511
2021-05-21 22:15:08
PYSEC-2021-83
2021-05-21 22:15:00
prion
prion
Design/Logic Flaw
2021-05-21 22:15:00
github
github
Server-Side Request Forgery in Plone
2021-06-15 16:12:04
nvd
nvd
CVE-2021-33511
2021-05-21 22:15:08
veracode
veracode
Server Side Request Forgery
2021-05-24 07:20:40
cve
cve
CVE-2021-33511
2021-05-21 22:15:08
cvelist
cvelist
CVE-2021-33511
2021-05-21 21:32:24
openvas
openvas
Plone CMS <= 5.2.4 Multiple Vulnerabilities
2021-05-27 00:00:00