PT-2018-5246 · Plone Foundation · Plone

Published 2018-01-03 · Updated 2022-05-14 · CVE-2017-1000481

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Plone versions 2.5 through 5.1rc1

Description The issue allows an attacker to potentially trick users into accessing malicious sites or executing attacker-controlled JavaScript after logging in, by exploiting the redirect mechanism that uses the came from parameter. Although Plone has measures like the isURLInPortal check to restrict redirects to within the same Plone site, additional methods to bypass these checks were found and addressed.

Recommendations For Plone versions 2.5 through 5.1rc1, apply the provided hotfix to prevent the exploitation of the redirect mechanism.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2017-1000481

GHSA-8G72-GQ68-6GQH

PYSEC-2018-70

Affected Products

Plone

References · 17

• https://osv.dev/vulnerability/GHSA-8g72-gq68-6gqh · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2018-70 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000481 · Security Note
• https://plone.org/security/hotfix/20171128/open-redirection-on-login-form · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1000481 · Vendor Advisory
• https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab · Note
• https://github.com/plone/Products.CMFPlone/pull/2235 · Note
• https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373 · Note
• https://github.com/plone/Products.CMFPlone/pull/2233 · Note
• https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b · Note
• https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8 · Note
• https://github.com/plone/Products.CMFPlone/pull/2234 · Note
• https://github.com/plone/Products.CMFPlone/pull/2236 · Note
• https://github.com/plone/Products.CMFPlone · Note
• https://github.com/plone/Products.CMFPlone/issues/2232 · Note