This vulnerability in Plone Docker Official Image 5.2.13 (5221) arises from improper validation of input in the HOST headers, enabling remote code execution. The CVSS 3.1 score is 6.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and partial confidentiality and integrity impact. No vendor advisory or patch information is provided, and no known exploits are reported in the wild as of the published date.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary code on the affected system by manipulating HOST headers. This can lead to partial loss of confidentiality and integrity of data, but does not affect availability. The vulnerability requires user interaction, which may limit exploitation scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected service and monitor for suspicious HOST header activity. No official remediation or temporary fixes are currently documented.