VDB
Sign up
—

PYSEC-2020-247

Quick fix

PYSEC-2020-247 — plone: upgrade to the fixed version with the command below.

pip install --upgrade 'plone>=5.2.3'

Details

Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/plone
Introduced in: 0Fixed in: 5.2.3
Fixpip install --upgrade 'plone>=5.2.3'

References