CVE-2026-55248

Published Aug 28, 2026

Last updated 25 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-55248 has been reserved by a CVE Numbering Authority (CNA), but as of current reports, the specific details of this vulnerability have not yet been officially published. While some discussions about it have been noted, comprehensive information from popular articles describing the nature of the flaw is not yet available.

Description: plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets. Prior to 5.0.8, 6.0.4, and 7.0.2, a member who can add an RSS portlet can set its feed URL to a very large response, causing src/plone/app/portlets/portlets/rss.py to download and retain excessive data in memory and deny service. The same RSS URL handling accepts internal hosts, IP addresses, single-word domains, and explicit ports, allowing server-side requests that can probe internal network services and open ports. A malicious feed item can also supply a JavaScript URL that is retained as the item link and can execute script when used by a victim. The affected logic includes _rss_feed_url_validator, _normal_url_validator, RSSFeed._retrieveFeed, RSSFeed._buildItemDict, and the FEED_DATA in-memory cache. This issue is fixed in versions 5.0.8, 6.0.4, and 7.0.2.
Source: security-advisories@github.com
NVD status: Deferred

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.1
Impact score: 5.3
Exploitability score: 3.1
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Severity: CRITICAL

Weaknesses

security-advisories@github.com: CWE-400

Hype score: Not currently trending

References