plone: Open Redirection in Plone
Published Mar 7, 2017
5.3
MEDIUMCVSS 4.0
EPSS 1.67%
Description
Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to (1) %2b%2bgroupdashboard%2b%2bplone.dashboard1%2bgroup/%2b/portlets.Actions or (2) folder/%2b%2bcontextportlets%2b%2bplone.footerportlets/%2b /portlets.Actions or the (3) came_from parameter to /login_form.
Affected products
No data.
- 3.3
- 3.3.1
- 3.3.2
- 3.3.3
- 3.3.4
- 3.3.5
- 3.3.6
- 4.0
- 4.0.1
- 4.0.2
- 4.0.3
- 4.0.4
- 4.0.5
- 4.0.7
- 4.0.8
- 4.0.9
- 4.0.10
- 4.1
- 4.1.1
- 4.1.2
- 4.1.3
- 4.1.4
- 4.1.5
- 4.1.6
- 4.2
- 4.2.1
- 4.2.2
- 4.2.3
- 4.2.4
- 4.2.5
- 4.2.6
- 4.2.7
- 4.3
- 4.3.1
- 4.3.2
- 4.3.3
- 4.3.4
- 4.3.5
- 4.3.6
- 4.3.7
- 4.3.8
- 4.3.9
- 4.3.10
- 4.3.11
- 5.0
- 5.0
- 5.0
- 5.0
- 5.0
- 5.0.1
- 5.0.2
- 5.0.3
- 5.0.4
- 5.0.5
- 5.0.6
- 5.1a1
No data.
Red Hat Enterprise Linux 5
conga
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | conga | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
No CVSS v3.1 score for this CVE.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1 other source (Red Hat) ▾
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AV:N/AC:M/Au:N/C:P/I:P/A:N
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (11 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 1.67% (0.01670) | 75.94th | v5 (v2026.06.15) |
| Jun 15, 2026 | 1.67% (0.01670) | 73.69th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.55% (0.00550) | 65.99th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.34% (0.00338) | 72.21th | v3 (v2023.03.01) |
| Feb 8, 2024 | 0.34% (0.00338) | 70.56th | v3 (v2023.03.01) |
| Jun 11, 2023 | 0.34% (0.00338) | 67.20th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.48% (0.00480) | 72.07th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.32% (0.01319) | 71.27th | v2 (v2022.01.01) |
| Feb 23, 2023 | 1.32% (0.01319) | 71.23th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.32% (0.01319) | 69.22th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.32% (0.01319) | 44.98th | v2 (v2022.01.01) |
References (15)
- http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html x_refsource_MISCExploitThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2016/Oct/80 mailing-listx_refsource_FULLDISCThird Party AdvisoryVDB Entry
- http://www.openwall.com/lists/oss-security/2016/09/05/4 mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
- http://www.openwall.com/lists/oss-security/2016/09/05/5 mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
- http://www.securityfocus.com/archive/1/539572/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/92752 vdb-entryx_refsource_BID
- https://access.redhat.com/security/cve/CVE-2016-7137 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1373440 Issue Tracking
- https://github.com/advisories/GHSA-69vh-662j-v988 Advisory
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-60.yaml
- https://nvd.nist.gov/vuln/detail/CVE-2016-7137
- https://plone.org/security/hotfix/20160830/open-redirection-in-plone x_refsource_CONFIRMVendor Advisory
- https://web.archive.org/web/20210625091607/http://www.securityfocus.com/bid/92752
- https://web.archive.org/web/20210625092107/http://www.securityfocus.com/archive/1/539572/100/0/threaded
- https://www.cve.org/CVERecord?id=CVE-2016-7137
Change history (0)
No recorded changes yet.