An open redirect flaw was found in multiple components of Plone, a user friendly and powerful content management system. Remote attacker could provide a specially-crafted URL that when visited by valid Plone user could lead the Plone user's session to be redirected to external site.
The CVE identifier of CVE-2013-4195 has been assigned to this issue:
Created plone tracking bugs for this issue:
Affects: epel-5 [bug 991015]