Lucene search
GoogleOSV:PYSEC-2021-83HistoryMay 21, 2021 - 10:15 p.m.
PYSEC-2021-83
2021-05-2122:15:00
Google
osv.dev
16
plone ssrf lxmlparser diazo dexterityttw ploneapptheming ploneappdexterity plonesupermodel software
EPSS
0.002
Percentile
55.1%
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.
Related
osv
osv
CVE-2021-33511
2021-05-21 22:15:08
Server-Side Request Forgery in Plone
2021-06-15 16:12:04
prion
prion
Design/Logic Flaw
2021-05-21 22:15:00
github
github
Server-Side Request Forgery in Plone
2021-06-15 16:12:04
nvd
nvd
CVE-2021-33511
2021-05-21 22:15:08
veracode
veracode
Server Side Request Forgery
2021-05-24 07:20:40
cvelist
cvelist
CVE-2021-33511
2021-05-21 21:32:24
cve
cve
CVE-2021-33511
2021-05-21 22:15:08
openvas
openvas
Plone CMS <= 5.2.4 Multiple Vulnerabilities
2021-05-27 00:00:00