[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2017-1000484":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":92,"references":94,"score":101,"epss_score":102,"epss_percentile":103,"is_kev":104,"cisa_kev_date_added":105,"cisa_kev_due_date":105,"cisa_ssvc":106,"attack_mappings":112,"exploits":119},200043,"CVE-2017-1000484","EUVD-2018-0116","Plone Open Redirect\n\nBy linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login form and login, then get redirected to the specific url, and then get a second redirect to the attacker website. ","2019-01-04T17:47:00Z",{"cvss_v3.0":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":19,"privilegesRequired":19,"confidentialityImpact":17},"CHANGED","3.0",6.1,"NETWORK","MEDIUM","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED","NONE",true,[22],"CWE-601",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91],"cpe:2.3:a:plone:plone:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.2:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.1:rc1:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.7:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.11:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0:rc2:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.1.1:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.9:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.14:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.10:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.10:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0:rc3:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.4:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0.9:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.1.5:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.3:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0.8:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.1:a2:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.1.6:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.15:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:2.5.5:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.1:b2:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0.7:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.1.4:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.6:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.5:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.0:rc1:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.1:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.1:a1:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.8:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.1:b4:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:5.1:b3:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.1.2:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.1.3:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:4.3.12:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:3.3.6:*:*:*:*:*:*:*","cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*",[93],"Plone Plone",[95,96,97,98,99,100],"https:\u002F\u002Fplone.org\u002Fsecurity\u002Fhotfix\u002F20171128\u002Fan-open-redirection-when-calling-a-specific-url","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2017-1000484","https:\u002F\u002Fgithub.com\u002Fplone\u002FProducts.CMFPlone\u002Fissues\u002F2232","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xvwv-6wvx-px9x","https:\u002F\u002Fgithub.com\u002Fplone\u002FPlone","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fplone\u002FPYSEC-2018-73.yaml",0.51,0.00917,0.59882,false,null,{"timestamp":105,"automatable":107,"tech_impact":108,"exploitation":109,"cisa_decision":110,"cisa_remediation_timeline":111},"no","partial","none",{},"FSU",[113],{"name":114,"source":115,"tactics":116,"technique_id":118},"Exploit Public-Facing Application","attack_vector",[117],"initial-access","T1190",[]]