CVE-2013-4195: Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect....

Security readout for executives and security teams

This CVE describes open redirects in older Plone releases. A vulnerable trusted Plone site could send users to an attacker-controlled site, supporting phishing or credential theft. The source bundle does not show direct system compromise, malware execution, or confirmed active exploitation. Exposure is most likely where legacy Plone versions in the listed ranges remain internet-accessible or are used for trusted intranet portals. Modern or unsupported deployments need version confirmation because the affected inventory in the bundle is incomplete. Handle as a phishing-enablement issue, not a server takeover based on available evidence. Prioritize if legacy Plone sites are public-facing, customer-trusted, or used for authentication-related workflows. Mitigation focus: Identify any Plone deployments and confirm exact versions.; Apply the Plone 20130618 hotfix where applicable.; Follow Plone vendor guidance for supported upgrade or replacement paths..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.