Zope Products.pluggableauthservice vulnerabilities

• zope products.pluggableauthservice URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService CVE-2021-21337 Public exploitFix available 5.7 MediumMarch 8, 2021
• zope products.pluggableauthservice, plone +1 more Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager CVE-2021-21336 Fix available 6.5 MediumMarch 8, 2021