Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:34:02 +0000 CVE-2026-28413 — Products.isurlinportal: Possible open redirect when using more than 2 forward slashes https://cve.radiocsirt.org/vuln/cve-2026-28413 <p><strong>Affected:</strong> plone Products.isurlinportal</p> <p>Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0.</p> <p><strong>Affected:</strong> plone Products.isurlinportal</p> <p>Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-28413