CVE-2013-4200

CVE-2013-4200 describes a vulnerability in the isURLInPortal method of Plone versions 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1. This flaw allows remote attackers to bypass URL filtering by prepending a space to a URL in the "next" parameter, leading to arbitrary web redirects and potential phishing attacks. With a CVSS score of 5.8 (Medium), it has a network attack vector and medium attack complexity, potentially resulting in partial confidentiality and integrity impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists for session hijacking, and the vulnerability has received minimal community discussion or media coverage.