PT-2021-20054 · Plone Cms · Plone Cms

Tino Kautschke · Published 2021-05-20 · Updated 2022-05-24 · CVE-2021-3313

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Plone CMS versions prior to 5.2.4

Description The issue is related to a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user, allowing an attacker to execute JavaScript in the context of the victim's browser if the victim opens a vulnerable page containing an XSS payload.

Recommendations For Plone CMS versions prior to 5.2.4, update to version 5.2.4 or later to resolve the issue. As a temporary workaround, consider restricting user input data to minimize the risk of exploitation. Avoid using the file upload functionality and the user fullname property until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-3313

GHSA-HPRR-4VFQ-FCXW

PYSEC-2021-78

Affected Products

Plone Cms

References · 13

• 🔥 https://compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt · Exploit
• https://osv.dev/vulnerability/PYSEC-2021-78 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3313 · Security Note
• https://plone.org/download/releases/5.2.3 · Vendor Advisory
• https://plone.org/security/hotfix/20210518 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hprr-4vfq-fcxw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3313 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-78.yaml · Note
• https://github.com/plone/Plone · Note
• https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html · Note
• https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname · Note
• https://t.me/cvenotify/14888 · Telegram Post
• http://openwall.com/lists/oss-security/2021/05/22/1 · Note