products-pluggableauthservice vulnerabilities (PyPI)

3 vulnerabilities.

• products-pluggableauthservice PyPI Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone CVE-2021-33507 Fix available 6.1 MediumMay 21, 2021
• products-pluggableauthservice PyPI URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService CVE-2021-21337 Public exploitFix available 5.7 MediumMarch 8, 2021
• products-pluggableauthservice PyPI Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager CVE-2021-21336 Fix available 6.5 MediumMarch 8, 2021