cnvd - cnvd-2018-02151

cnvd-2018-02151

Vulnerability from cnvd

Title: Plone开放重定向漏洞（CNVD-2018-02151）

Description:

Plone是美国Plone基金会的一套建立在应用服务器（Zope）上的免费且开源的内容管理系统（CMS）。该系统采用Python语言开发，适用于门户网站、企业内外网站、文档发布系统等。

Plone中存在开放重定向漏洞。攻击者可利用该漏洞将用户定向到其他网站。

Severity: 中

Patch Name: Plone开放重定向漏洞（CNVD-2018-02151）的补丁

Patch Description:

Plone中存在开放重定向漏洞。攻击者可利用该漏洞将用户定向到其他网站。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url

Reference: https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url

Impacted products

Name
Plone Plone >=2.5，<=5.1rc1

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-1000484"
    }
  },
  "description": "Plone\u662f\u7f8e\u56fdPlone\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u5efa\u7acb\u5728\u5e94\u7528\u670d\u52a1\u5668\uff08Zope\uff09\u4e0a\u7684\u514d\u8d39\u4e14\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\uff08CMS\uff09\u3002\u8be5\u7cfb\u7edf\u91c7\u7528Python\u8bed\u8a00\u5f00\u53d1\uff0c\u9002\u7528\u4e8e\u95e8\u6237\u7f51\u7ad9\u3001\u4f01\u4e1a\u5185\u5916\u7f51\u7ad9\u3001\u6587\u6863\u53d1\u5e03\u7cfb\u7edf\u7b49\u3002\r\n\r\nPlone\u4e2d\u5b58\u5728\u5f00\u653e\u91cd\u5b9a\u5411\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5c06\u7528\u6237\u5b9a\u5411\u5230\u5176\u4ed6\u7f51\u7ad9\u3002",
  "discovererName": "Zhouyuan Yang, at Fortinet\u0027s FortiGuard Labs\uff1bJayson Grace, at Sandia National Laboratories",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-02151",
  "openTime": "2018-01-29",
  "patchDescription": "Plone\u662f\u7f8e\u56fdPlone\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u5efa\u7acb\u5728\u5e94\u7528\u670d\u52a1\u5668\uff08Zope\uff09\u4e0a\u7684\u514d\u8d39\u4e14\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\uff08CMS\uff09\u3002\u8be5\u7cfb\u7edf\u91c7\u7528Python\u8bed\u8a00\u5f00\u53d1\uff0c\u9002\u7528\u4e8e\u95e8\u6237\u7f51\u7ad9\u3001\u4f01\u4e1a\u5185\u5916\u7f51\u7ad9\u3001\u6587\u6863\u53d1\u5e03\u7cfb\u7edf\u7b49\u3002\r\n\r\nPlone\u4e2d\u5b58\u5728\u5f00\u653e\u91cd\u5b9a\u5411\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5c06\u7528\u6237\u5b9a\u5411\u5230\u5176\u4ed6\u7f51\u7ad9\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Plone\u5f00\u653e\u91cd\u5b9a\u5411\u6f0f\u6d1e\uff08CNVD-2018-02151\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Plone Plone \u003e=2.5\uff0c\u003c=5.1rc1"
  },
  "referenceLink": "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url",
  "serverity": "\u4e2d",
  "submitTime": "2018-01-05",
  "title": "Plone\u5f00\u653e\u91cd\u5b9a\u5411\u6f0f\u6d1e\uff08CNVD-2018-02151\uff09"
}

CVE-2017-1000484 (GCVE-0-2017-1000484)

Vulnerability from cvelistv5

Published

2018-01-03 20:00

Modified

2024-09-16 19:52

Severity ?

CWE

Summary

By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login form and login, then get redirected to the specific url, and then get a second redirect to the attacker website. (The specific url can be seen by inspecting the hotfix code, but we don't want to make it too easy for attackers by spelling it out here.)

References

▼	URL	Tags
	https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:00:41.653Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2017-12-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login form and login, then get redirected to the specific url, and then get a second redirect to the attacker website. (The specific url can be seen by inspecting the hotfix code, but we don\u0027t want to make it too easy for attackers by spelling it out here.)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-03T20:00:00Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "2017-12-29",
          "ID": "CVE-2017-1000484",
          "REQUESTER": "security@plone.org",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login form and login, then get redirected to the specific url, and then get a second redirect to the attacker website. (The specific url can be seen by inspecting the hotfix code, but we don\u0027t want to make it too easy for attackers by spelling it out here.)"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url",
              "refsource": "CONFIRM",
              "url": "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-1000484",
    "datePublished": "2018-01-03T20:00:00Z",
    "dateReserved": "2018-01-03T00:00:00Z",
    "dateUpdated": "2024-09-16T19:52:21.255Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted