CVE-2023-41048

plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross site scripting vulnerability for SVG images. A security hotfix from 2021 already partially fixed this by making sure SVG images are always downloaded instead of shown inline. But the same problem still exists for scales of SVG images. Note that an image tag with an SVG image as source is not vulnerable, even when the SVG image contains malicious code. To exploit the vulnerability, an attacker would first need to upload an image, and then trick a user into following a specially crafted link. Patches are available in versions 5.6.1 (for Plone 5.2), 6.0.3 (for Plone 6.0.0-6.0.4), 6.1.3 (for Plone 6.0.5-6.0.6), and 6.2.1 (for Plone 6.0.7). There are no known workarounds.

• CWE-79
• CWE-80
• CWE-79

• http://www.openwall.com/lists/oss-security/2023/09/22/2Mailing List, Third Party Advisory
• https://github.com/plone/Products.PloneHotfix20210518Product
• https://github.com/plone/plone.namedfile/commit/188f66a4577021cf8f2bf7c0f5150f9b9573f167Patch
• https://github.com/plone/plone.namedfile/commit/217d6ce847b7171bf1b73fcb6c08010eb449216aPatch
• https://github.com/plone/plone.namedfile/commit/f0f911f2a72b2e5c923dc2ab9179319cc47788f9Patch
• https://github.com/plone/plone.namedfile/commit/ff5269fb4c79f4eb91dd934561b8824a49a03b60Patch
• https://github.com/plone/plone.namedfile/security/advisories/GHSA-jj7c-jrv4-c65xVendor Advisory
• http://www.openwall.com/lists/oss-security/2023/09/22/2Mailing List, Third Party Advisory
• https://github.com/plone/Products.PloneHotfix20210518Product
• https://github.com/plone/plone.namedfile/commit/188f66a4577021cf8f2bf7c0f5150f9b9573f167Patch
• https://github.com/plone/plone.namedfile/commit/217d6ce847b7171bf1b73fcb6c08010eb449216aPatch
• https://github.com/plone/plone.namedfile/commit/f0f911f2a72b2e5c923dc2ab9179319cc47788f9Patch
• https://github.com/plone/plone.namedfile/commit/ff5269fb4c79f4eb91dd934561b8824a49a03b60Patch
• https://github.com/plone/plone.namedfile/security/advisories/GHSA-jj7c-jrv4-c65xVendor Advisory

Published

Sep 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41042Discourse is an open-source discussion platform. Prior to ve…6.5
• CVE-2023-41043Discourse is an open-source discussion platform. Prior to ve…6.5
• CVE-2023-41044Graylog is a free and open log management platform. A partia…3.8
• CVE-2023-41045Graylog is a free and open log management platform. Graylog …5.3
• CVE-2023-41046XWiki Platform is a generic wiki platform offering runtime s…6.3
• CVE-2023-41047OctoPrint is a web interface for 3D printers. OctoPrint vers…6.5
• CVE-2023-41049@dcl/single-sign-on-client is an open source npm library whi…6.1
• CVE-2023-4105Mattermost fails to delete the attachments when deleting a m…4.3
• CVE-2023-41050AccessControl provides a general security framework for use …7.7
• CVE-2023-41051In a typical Virtual Machine Monitor (VMM) there are several…4.7
• CVE-2023-41052Vyper is a Pythonic Smart Contract Language. In affected ver…5.3
• CVE-2023-41053Redis is an in-memory database that persists on disk. Redis …3.3