CVE-2006-4247
2 advisories.
PyPI/plone CVE-2006-4247: critical 9.1
Plone allows anonymous users to reset any users password through the web via Password Reset Tool
Action: Upgrade plone to 2.5.1 or later.
pip install plone==2.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5 | 2.5.1 | - |
Fixed versions
| 2.5.1 |
Sources
- osv: GHSA-5hch-v5pq-x4qp
- https://nvd.nist.gov/vuln/detail/CVE-2006-4247
- https://github.com/plone/Plone
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2006-5.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2006-9.yaml
- http://plone.org/about/security/advisories/cve-2006-4247
CVE-2006-4247 · published · modified · JSON
PyPI/plone CVE-2006-4247: unknown
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security dec
Action: Upgrade plone to 2.5.1 or later.
pip install plone==2.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5 | 2.5.1 | - |
Fixed versions
| 2.5.1 |
Sources
- osv: PYSEC-2006-5
- http://plone.org/about/security/advisories/cve-2006-4247
- https://github.com/advisories/GHSA-5hch-v5pq-x4qp
CVE-2006-4247 · published · modified · JSON