Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-28735

Fixed upstream EPSS 1%

Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).

Published 2020-12-30 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone5.2.3
PyPIplone-app-dexterity2.6.8
PyPIplone-app-event3.2.10
PyPIplone-app-theming4.1.6
PyPIplone-supermodel1.6.3