https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:21:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274812 EUVD-2026-274812 https://cve.radiocsirt.org/vuln/euvd-2026-274812 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28413 <p>Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0.</p> <p>Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28413 https://cve.radiocsirt.org/vuln/ghsa-43gx-6gv6-3jcp <p><strong>Affected:</strong> PyPI: Products.isurlinportal, PyPI: products-isurlinportal</p> <p>### Impact A url `/login?came_from=////evil.example` may redirect to an external website after login.</p> <p>Standard Plone is not affected, but if you have customised the login, for example with add-ons, you might be affected. You can try the url to check if you are affected or not.</p> <p>### Patches The problem has been patched in `Products.isurlinportal`.</p> <p>* Plone 6.2: upgrade to `Products.isurlinportal` 4.0.0. * Plone 6.1: upgrade to `Products.isurlinportal` 3.1.0. * Plone 6.0: upgrade to `Products.isurlinportal` 2.1.0. * Older Plone versions don&#39;t have security support anymore.</p> <p>### Workarounds There are no known workarounds.</p> <p>### Background When you are anonymous and land on a page that requires a login, Plone sends you to the login form. After successful login, Plone redirects you back to the page you came from. Various other forms and pages have a similar system.</p> <p>This could get abused by an attacker to trick Plone into redirecting to a different website. Plone checks the page that would be redirected to. It is only accepted if it is within the Plone site domain or part of a different trusted domain.</p> <p>The main check for this is in the `Products.isurlinportal` package. A lot of potentially malicious urls are already safely rejected, but here a loop hole was found.</p> <p>This was discovered during a penetration test by the CERT-EU Team.</p> <p><strong>Affected:</strong> PyPI: Products.isurlinportal, PyPI: products-isurlinportal</p> <p>### Impact A url `/login?came_from=////evil.example` may redirect to an external website after login.</p> <p>Standard Plone is not affected, but if you have customised the login, for example with add-ons, you might be affected. You can try the url to check if you are affected or not.</p> <p>### Patches The problem has been patched in `Products.isurlinportal`.</p> <p>* Plone 6.2: upgrade to `Products.isurlinportal` 4.0.0. * Plone 6.1: upgrade to `Products.isurlinportal` 3.1.0. * Plone 6.0: upgrade to `Products.isurlinportal` 2.1.0. * Older Plone versions don&#39;t have security support anymore.</p> <p>### Workarounds There are no known workarounds.</p> <p>### Background When you are anonymous and land on a page that requires a login, Plone sends you to the login form. After successful login, Plone redirects you back to the page you came from. Various other forms and pages have a similar system.</p> <p>This could get abused by an attacker to trick Plone into redirecting to a different website. Plone checks the page that would be redirected to. It is only accepted if it is within the Plone site domain or part of a different trusted domain.</p> <p>The main check for this is in the `Products.isurlinportal` package. A lot of potentially malicious urls are already safely rejected, but here a loop hole was found.</p> <p>This was discovered during a penetration test by the CERT-EU Team.</p> https://cve.radiocsirt.org/vuln/ghsa-43gx-6gv6-3jcp https://cve.radiocsirt.org/vuln/pysec-2026-112 <p><strong>Affected:</strong> PyPI: products-isurlinportal</p> <p>Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0.</p> <p><strong>Affected:</strong> PyPI: products-isurlinportal</p> <p>Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0.</p> https://cve.radiocsirt.org/vuln/pysec-2026-112