CVE-2017-1000481

CVE-2017-1000481 describes an open redirect vulnerability in Plone versions 2.5 through 5.1rc1. An attacker could craft a malicious link that, upon successful login, redirects the user to an attacker-controlled site or executes malicious JavaScript, despite Plone's existing URL validation. This vulnerability has a CVSS score of 6.1 (Medium), indicating a network-based attack requiring user interaction with low attack complexity, potentially leading to information disclosure and integrity impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.