{"vulnerability": "cve-2026-55247", "sightings": [{"uuid": "d1b13e10-6784-4108-8f32-3b6ad40857eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55247", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muagtjc7tp2e", "content": "CVE-2026-55247 - plone-app-event\nThe calendar import feature in Plone\u2019s event manager (versions before 5.2.4 and 6.0.1) lets a logged\u2011in editor supply specially crafted URLs that can make the server reach\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plone #Python #CVE #infosec", "creation_timestamp": "2026-08-29T17:50:05.596658Z"}, {"uuid": "30e667f7-71b4-44c6-948b-24acffbb37b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55247", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6ernejp724", "content": "\ud83d\udea8 CVE-2026-55247 \u2014 CVSS 9.1 CRITICAL\n\nplone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55247\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T22:07:55.917911Z"}, {"uuid": "1d9284d6-ad2b-47bf-bfde-c6dbaa923dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55247", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mu62tjrvqz2v", "content": "plone.app.event CVE-2026-55247 is rated critical: a logged-in editor's iCalendar import can take the site offline, make the server read calendar files off disk and reach internal hosts (SSRF). Patched in 6.0.1 for Plone 6.2, 5.2.4 for 6.1 and 6.0. #dev", "creation_timestamp": "2026-08-28T19:10:03.910044Z"}, {"uuid": "bb9ca982-637a-46c2-9a96-b8cfeab6ee67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55247", "type": "seen", "source": "https://gist.github.com/alon710/0c57b295c1c8fe9eb4b1e012f4bf501d", "content": "# CVE-2026-55247: CVE-2026-55247: Multiple Vulnerabilities (DoS, SSRF, and Stored XSS) in plone.app.event iCalendar Import\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55247\n\n## Summary\nA critical security vulnerability exists in plone.app.event, the event content type package for the Plone CMS. Prior to versions 5.2.4 and 6.0.1, the iCalendar import component lacked proper file size controls, URL scheme validation, and network isolation filters. Authenticated editors could exploit these deficiencies to cause denial of service via memory exhaustion, read local files, perform server-side request forgery, and inject stored cross-site scripting vectors.\n\n## TL;DR\nPlone's event importer failed to validate input sizes and URL protocols, enabling authenticated users to trigger Denial of Service, execute Server-Side Request Forgery, and inject Stored XSS.\n\n## Technical Details\n\n- **CWE ID**: CWE-400 (Uncontrolled Resource Consumption)\n- **Attack Vector**: Network\n- **CVSS Score**: 9.1 (Critical)\n- **Impact**: Denial of Service, SSRF, Stored XSS\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n- **Access Required**: Low Privilege (Authenticated Editor)\n\n## Affected Systems\n\n- Plone CMS (via plone.app.event)\n- **plone.app.event**: < 5.2.4 (Fixed in: `5.2.4`)\n- **plone.app.event**: >= 6.0.0, < 6.0.1 (Fixed in: `6.0.1`)\n\n## Mitigation\n\n- Update plone.app.event to patched versions (5.2.4 or 6.0.1)\n- Restrict event creation and import privileges to highly trusted users\n- Configure system-level network firewalls to block outgoing traffic from the Plone application to local and private IP spaces\n- Implement a reverse proxy or WAF to filter malicious request patterns\n\n**Remediation Steps:**\n1. Identify current installed version of plone.app.event using buildout or pip.\n2. Update requirements file to specify plone.app.event>=5.2.4 for Plone 5.x, or plone.app.event>=6.0.1 for Plone 6.x.\n3. Run the buildout or pip installation command to fetch and install the updated package.\n4. Restart the Plone/Zope instances to apply changes in a staging environment.\n5. Verify functionality by attempting to import a normal iCalendar file and ensuring unauthorized protocols are rejected.\n6. Deploy the updated build to production environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-r82h-mqw3-fc56](https://github.com/plone/plone.app.event/security/advisories/GHSA-r82h-mqw3-fc56)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55247) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T19:31:37.010879Z"}, {"uuid": "6bbb721d-c636-4fea-bf48-23435b2b9feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55247", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muckkq72fz22", "content": "\ud83d\udd34 CVE-2026-55247 - Critical (9.1)\n\nplone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55247/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T14:02:06.610700Z"}]}