CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2021-33510
Medium (4.3) in plone plone. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in plone 5.2.5.
Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- plone:plone
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4mg4-wvmx-5332 | PyPI | plone | <=5.2.4 | no fix published |
| PYSEC-2021-82 | PyPI | plone | <5.2.5 | 5.2.5 |