CVE-2020-28735

Published December 30th, 2020

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).

plone/Products.CMFPlone

The core of the Plone content management system

GitHub

307