Description
Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-1999-0012)
Oracle Database Server Incorrect Authorization Vulnerability (CVE-2025-30751)
MySQL CVE-2012-3180 Vulnerability (CVE-2012-3180)
Drupal Core 8.9.x Multiple Cross-Site Scripting Vulnerabilities (8.9.0 - 8.9.5)
WordPress Plugin Form Builder CP Unspecified Vulnerability (1.2.15)