CVEvulnerability
CVE-2013-4195
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-20
Description
Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected configurations
• plone plone 2.1
• plone plone 2.1.1
• plone plone 2.1.2
• plone plone 2.1.3
• plone plone 2.1.4
• plone plone 2.5
• plone plone 2.5.1
• plone plone 2.5.2
• plone plone 2.5.3
• plone plone 2.5.4
• plone plone 2.5.5
• plone plone 3.0
• plone plone 3.0.1
• plone plone 3.0.2
• plone plone 3.0.3
• plone plone 3.0.4
• plone plone 3.0.5
• plone plone 3.0.6
• plone plone 3.1
• plone plone 3.1.1
• plone plone 3.1.2
• plone plone 3.1.3
• plone plone 3.1.4
• plone plone 3.1.5.1
• plone plone 3.1.6
• plone plone 3.1.7
• plone plone 3.2
• plone plone 3.2.1
• plone plone 3.2.2
• plone plone 3.2.3
• plone plone 3.3
• plone plone 3.3.1
• plone plone 3.3.2
• plone plone 3.3.3
• plone plone 3.3.4
• plone plone 3.3.5
• plone plone 4.0
• plone plone 4.0.1
• plone plone 4.0.2
• plone plone 4.0.3
• plone plone 4.0.4
• plone plone 4.0.5
• plone plone 4.0.6.1
• plone plone 4.1
• plone plone 4.3
• plone plone 4.3.1
• plone plone 4.2
• plone plone 4.2.1
• plone plone 4.2.2
• plone plone 4.2.3
• plone plone 4.2.4
• plone plone 4.2.5
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://plone.org/products/plone-hotfix/releases/20130618 Patch
- http://plone.org/products/plone/security/advisories/20130618-announcement Vendor Advisory
- http://seclists.org/oss-sec/2013/q3/261 seclists.org
- https://bugzilla.redhat.com/show_bug.cgi?id=978471 bugzilla.redhat.com
- http://plone.org/products/plone-hotfix/releases/20130618 Patch
- http://plone.org/products/plone/security/advisories/20130618-announcement Vendor Advisory
- http://seclists.org/oss-sec/2013/q3/261 seclists.org
- https://bugzilla.redhat.com/show_bug.cgi?id=978471 bugzilla.redhat.com