Open Redirect in Plone Isurlinportal
CVE-2021-32806
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1.2.0 have an Open Redirect vulnerability. Various parts of Plone use the 'is url in portal' check for security, mostly to see if it is safe to redirect to a url. A url like `https://example.org` is not in the portal. The url `https:example.org` without slashes is considered to be in the portal. When redirecting, some browsers go to `https://example.org`, others give an error. Attackers may use this to redirect victims to their site, especially as part of a phishing attack. The problem has been patched in Products.isurlinportal 1.2.0.
Vulnerability class: Open Redirect
EPSS: 0.010 (60.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.
Affected products
- Plone Isurlinportal
- Plone Products.isurlinportal — versions < 1.2.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory)
- security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)
- security-advisories@github.com (Third Party Advisory, x_refsource_JVN, third-party-advisory)
Frequently asked questions
- What is CVE-2021-32806?
- CVE-2021-32806 is a medium-severity vulnerability in Plone Isurlinportal, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.5/10. Published 2021-08-02.
- How severe is CVE-2021-32806?
- Medium severity. CVSS v3 base score is 6.5 out of 10.