{"action":"Upgrade plone to 2.0.6 or later.","affected":[{"fixed":"2.0.6","introduced":"0"},{"introduced":"2.1.0","last_affected":"2.1.2"}],"component":"plone","cve_ids":["CVE-2006-1711"],"ecosystem":"PyPI","epss":0.04016,"exploited":false,"fixed_versions":["2.0.6"],"ghsa_id":"GHSA-jcwh-rj6j-vm75","id":"tcs_01M5KFNMWPN2701SQTN3S3TRC3","modified_at":"2026-07-06T08:11:24.446878995Z","published_at":"2022-05-01T06:52:02Z","references":["https://osv.dev/vulnerability/GHSA-jcwh-rj6j-vm75","https://nvd.nist.gov/vuln/detail/CVE-2006-1711","https://exchange.xforce.ibmcloud.com/vulnerabilities/25781","https://github.com/plone/Plone","https://web.archive.org/web/20060412111111/https://dev.plone.org/plone/ticket/5432","https://web.archive.org/web/20060422195724/http://www.securityfocus.com/bid/17484","http://www.debian.org/security/2006/dsa-1032"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-jcwh-rj6j-vm75","url":"https://osv.dev/vulnerability/GHSA-jcwh-rj6j-vm75"}],"summary":"Plone allows remote users to modify arbitrary portraits"}