CVE-2017-1000484

CVE-2017-1000484 describes an open redirect vulnerability affecting Plone versions 2.5 through 5.1rc1. An attacker could craft a specific URL that, when visited by a user, would redirect them to an arbitrary external website. While not severe on its own, this vulnerability could be chained with other attacks, such as tricking a logged-in user into being redirected to a malicious site. The vulnerability has a CVSS v3.0 score of 6.1 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and resulting in low confidentiality and integrity impacts. The primary risk is the potential for phishing or other social engineering attacks. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and a lack of widespread attention.