CVE-2013-4200: High severity plone cms vulnerability
The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to arbitrary web sites, and conduct phishing attacks via a space before a URL in the "next" parameter to aclusers/credentialscookieauth/requirelogin.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4200?
CVE-2013-4200 has a high severity rating due to its ability to allow remote attackers to bypass security filters.
How do I fix CVE-2013-4200?
To fix CVE-2013-4200, update to Plone version 4.3.2 or later, or 4.2.6/4.1.1 as applicable.
What versions are affected by CVE-2013-4200?
CVE-2013-4200 affects Plone versions 2.1 through 4.3.1.
What kind of attacks can CVE-2013-4200 facilitate?
CVE-2013-4200 can facilitate attacks that bypass external login site restrictions, leading to potential phishing attempts.
Is there a workaround for CVE-2013-4200 if immediate patching is not possible?
A temporary workaround for CVE-2013-4200 is to review and tighten the allow_external_login_sites filtering property settings.