Description
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
Remediation
References
Related Vulnerabilities
WebLogic CVE-2017-10336 Vulnerability (CVE-2017-10336)
WordPress Plugin ComicPress Manager 'lang' Parameter Cross-Site Scripting (1.4.9.9)
MySQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2005-0709)
WordPress Plugin Britetechs Companion Malicious Code (2.2.7)
Oracle Database Server CVE-2020-2516 Vulnerability (CVE-2020-2516)