CVE-2013-4192

CVE Database · CVE-2013-4192

CVE-2013-4192

· N/AModified

CVSS v3.1

N/A

EPSS

1.09%

Published

Mar 11, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to spoof emails via unspecified vectors.

Weaknesses (CWE)

CWE-20

Affected Products (52)

plone · plonevulnerable

plone · plone

References (8)

http://plone.org/products/plone-hotfix/releases/20130618

Patch

http://plone.org/products/plone/security/advisories/20130618-announcement

Vendor Advisory

http://seclists.org/oss-sec/2013/q3/261

https://bugzilla.redhat.com/show_bug.cgi?id=978464