tocsin

CVE-2011-1950

4 advisories.

PyPI/plone-app-users CVE-2011-1950: medium 6.5, EPSS 2.35%

Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts

Action: Upgrade plone-app-users to 1.0.5 or later.

pip install plone-app-users==1.0.5
pip install plone-app-users==1.1.1

Affected

introducedfixedlast affected
1.0a11.0.5-
1.1b11.1.1-

Fixed versions

1.0.51.1.1

Sources

CVE-2011-1950 · published · modified · JSON

PyPI/plone CVE-2011-1950: medium 6.5, EPSS 2.35%

Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts

Action: Upgrade plone to 4.0.6 or later.

pip install plone==4.0.6
pip install plone==4.1.1

Affected

introducedfixedlast affected
4.0.14.0.6-
4.1.04.1.1-

Fixed versions

4.0.64.1.1

Sources

CVE-2011-1950 · published · modified · JSON

PyPI/plone CVE-2011-1950: unknown, EPSS 2.35%

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

Action: Upgrade plone to 4.1.1 or later.

pip install plone==4.1.1

Affected

introducedfixedlast affected
04.1.1-

Fixed versions

4.1.1

Sources

CVE-2011-1950 · published · modified · JSON

PyPI/plone-app-users CVE-2011-1950: medium 6.5, EPSS 2.35%

Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts

Action: Upgrade plone-app-users to 1.0.5 or later.

pip install plone-app-users==1.0.5
pip install plone-app-users==1.1.1

Affected

introducedfixedlast affected
1.0a11.0.5-
1.1b11.1.1-

Fixed versions

1.0.51.1.1

Sources

CVE-2011-1950 · published · modified · JSON