CVE-2021-33511

Plone though 5.2.4 allows SSRF via the lxml parser

published May 21, 2021

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01160 · 66.9th percentile
Published
2021-05-21T21:32Z
EPSS history
Timeline
  • 21 MAY 21:32Z
    Plone though 5.2.4 allows SSRF via the lxml parser
    cvelistv5