PT-2026-59518 · Pypi · Plone-App-Dexterity

Published

2026-07-09

·

Updated

2026-07-09

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

PYSEC-2026-2881

Affected Products

Plone-App-Dexterity