PyPI/plone CVE-2006-4247: critical 9.1, EPSS 1.01%
Plone allows anonymous users to reset any users password through the web via Password Reset Tool
Action: Upgrade plone to 2.5.1 or later.
pip install plone==2.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5 | 2.5.1 | - |
Fixed versions
| 2.5.1 |
Sources
- osv: GHSA-5hch-v5pq-x4qp
- https://nvd.nist.gov/vuln/detail/CVE-2006-4247
- https://github.com/plone/Plone
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2006-5.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2006-9.yaml
- http://plone.org/about/security/advisories/cve-2006-4247
CVE-2006-4247 · published · modified · JSON