First published: Wed Jun 26 2013(Updated: )
An open redirect flaw was found in multiple components of Plone, a user friendly and powerful content management system. Remote attacker could provide a specially-crafted URL that when visited by valid Plone user could lead the Plone user's session to be redirected to external site.
Affected Software | Affected Version | How to fix |
---|---|---|
Plone CMS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of REDHAT-BUG-978471 is considered medium due to the potential for a remote attacker to exploit the open redirect flaw.
To fix REDHAT-BUG-978471, update Plone to the latest version that contains the patch for the open redirect vulnerability.
REDHAT-BUG-978471 affects multiple components of Plone, a popular content management system.
An attacker can exploit REDHAT-BUG-978471 to redirect valid Plone users to a malicious external site.
Valid users of Plone who click on specially-crafted URLs may be impacted by REDHAT-BUG-978471.