tocsin

PyPI/plone CVE-2006-4247: unknown, EPSS 1.01%

Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security dec

Action: Upgrade plone to 2.5.1 or later.

pip install plone==2.5.1

Affected

introducedfixedlast affected
2.52.5.1-

Fixed versions

2.5.1

Sources

CVE-2006-4247 · published · modified · JSON