Description

sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to spoof emails via unspecified vectors.

Remediation

References

CVE-2013-4192

Related Vulnerabilities

Atlassian Jira Incorrect Authorization Vulnerability (CVE-2019-8446)

Oracle HTTP Server CVE-2021-2480 Vulnerability (CVE-2021-2480)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-11327)

WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Request Forgery (5.2.5.9)

WordPress Plugin Brizy-Page Builder Multiple Vulnerabilities (2.3.11)

Severity

Medium

Classification

CVE-2013-4192 CWE-20

Tags

Missing Update Known Vulnerabilities