CVE

Id
93957  
CVE No.
CVE-2016-7137  
Status
Candidate  
Description
Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to (1) %2b%2bgroupdashboard%2b%2bplone.dashboard1%2bgroup/%2b/portlets.Actions or (2) folder/%2b%2bcontextportlets%2b%2bplone.footerportlets/%2b /portlets.Actions or the (3) came_from parameter to /login_form.  
Phase
Assigned (20160905)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
795005 93957 CVE-2016-7137 BUGTRAQ:20161012 Multiple Vulnerabilities in Plone CMS  View
795006 93957 CVE-2016-7137 URL:http://www.securityfocus.com/archive/1/archive/1/539572/100/0/threaded  View
795007 93957 CVE-2016-7137 FULLDISC:20161019 Multiple Vulnerabilities in Plone CMS  View
795008 93957 CVE-2016-7137 URL:http://seclists.org/fulldisclosure/2016/Oct/80  View
795009 93957 CVE-2016-7137 MLIST:[oss-security] 20160905 Re: CVE request: Plone multiple vulnerabilities  View
795010 93957 CVE-2016-7137 URL:http://www.openwall.com/lists/oss-security/2016/09/05/4  View
795011 93957 CVE-2016-7137 MLIST:[oss-security] 20160905 Re: CVE request: Plone multiple vulnerabilities  View
795012 93957 CVE-2016-7137 URL:http://www.openwall.com/lists/oss-security/2016/09/05/5  View
795013 93957 CVE-2016-7137 MISC:http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html  View
795014 93957 CVE-2016-7137 CONFIRM:https://plone.org/security/hotfix/20160830/open-redirection-in-plone  View
795015 93957 CVE-2016-7137 BID:92752  View

Related JVN