VDB
KO

PYSEC-2020-247

Details

Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / plone
Introduced in: 0 Fixed in: 5.2.3
Fix pip install --upgrade 'plone>=5.2.3'

References