Description
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
Remediation
References
Related Vulnerabilities
WordPress Plugin Booking Calendar Cross-Site Request Forgery (9.2.1)
WordPress Plugin ActiveCampaign-Forms, Site Tracking, Live Chat Cross-Site Request Forgery (8.0.1)
WordPress Plugin Email Before Download SQL Injection (6.7)
Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-14280)
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2079)