CVE-2021-33510

Name of the Vulnerable Software and Affected Versions Plone versions through 5.2.4

Description The issue allows remote authenticated managers to conduct Server-Side Request Forgery (SSRF) attacks via an event ical URL. This enables them to read one line of a file.

Recommendations For versions through 5.2.4, update to a version that contains a fix for this issue to prevent SSRF attacks. As a temporary workaround, consider restricting access to the event ical URL to minimize the risk of exploitation.