{"action":"Upgrade plone to 4.0.6 or later.","affected":[{"fixed":"4.0.6","introduced":"4.0.1"},{"fixed":"4.1.1","introduced":"4.1.0"}],"component":"plone","cve_ids":["CVE-2011-1950"],"ecosystem":"PyPI","epss":0.02349,"exploited":false,"fixed_versions":["4.0.6","4.1.1"],"ghsa_id":"GHSA-2qx8-589j-gcpx","id":"tcs_01M5KET4GGKKRWC36Y1MXPSATF","modified_at":"2026-07-13T16:43:10.969610093Z","published_at":"2018-07-23T20:26:45Z","references":["https://osv.dev/vulnerability/GHSA-2qx8-589j-gcpx","https://nvd.nist.gov/vuln/detail/CVE-2011-1950","https://exchange.xforce.ibmcloud.com/vulnerabilities/67695","https://github.com/advisories/GHSA-2qx8-589j-gcpx","https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-16.yaml","http://plone.org/products/plone/security/advisories/CVE-2011-1950"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-2qx8-589j-gcpx#PyPI/plone","url":"https://osv.dev/vulnerability/GHSA-2qx8-589j-gcpx"}],"summary":"Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts"}