PT-2018-5246 · Plone Foundation · Plone

Publicado 2018-01-03 · Atualizado 2022-05-14 · CVE-2017-1000481

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Plone versions 2.5 through 5.1rc1

Description The issue allows an attacker to potentially trick users into accessing malicious sites or executing attacker-controlled JavaScript after logging in, by exploiting the redirect mechanism that uses the came from parameter. Although Plone has measures like the isURLInPortal check to restrict redirects to within the same Plone site, additional methods to bypass these checks were found and addressed.

Recommendations For Plone versions 2.5 through 5.1rc1, apply the provided hotfix to prevent the exploitation of the redirect mechanism.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2017-1000481

GHSA-8G72-GQ68-6GQH

PYSEC-2018-70

Produtos afetados

Plone

Referências · 17

• https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab · Nota
• https://github.com/plone/Products.CMFPlone/pull/2235 · Nota
• https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373 · Nota
• https://github.com/plone/Products.CMFPlone/pull/2233 · Nota
• https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b · Nota
• https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8 · Nota
• https://github.com/plone/Products.CMFPlone/pull/2234 · Nota
• https://github.com/plone/Products.CMFPlone/pull/2236 · Nota
• https://github.com/plone/Products.CMFPlone · Nota
• https://github.com/plone/Products.CMFPlone/issues/2232 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-70.yaml · Nota
• https://osv.dev/vulnerability/GHSA-8g72-gq68-6gqh · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2018-70 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000481 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000481 · Nota de Segurança