Description
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
Remediation
References
Related Vulnerabilities
MySQL CVE-2016-0597 Vulnerability (CVE-2016-0597)
Oracle Database Server CVE-2006-0271 Vulnerability (CVE-2006-0271)
MongoDb Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-13066)
PHP Other Vulnerability (CVE-2007-1452)
Oracle Application Server Other Vulnerability (CVE-2007-3863)