{"action":"Upgrade plone to 4.1.1 or later.","affected":[{"fixed":"4.1.1","introduced":"0"}],"component":"plone","cve_ids":["CVE-2011-1950"],"ecosystem":"PyPI","epss":0.02349,"exploited":false,"fixed_versions":["4.1.1"],"ghsa_id":"GHSA-2qx8-589j-gcpx","id":"tcs_01M5KG5G141JQVQN2EX5P3SW4R","modified_at":"2026-07-13T16:43:10.969610093Z","published_at":"2011-06-06T19:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2011-16","http://www.securityfocus.com/bid/48005","http://secunia.com/advisories/44775","http://plone.org/products/plone/security/advisories/CVE-2011-1950","http://osvdb.org/72729","http://securityreason.com/securityalert/8269","https://exchange.xforce.ibmcloud.com/vulnerabilities/67695","http://www.securityfocus.com/archive/1/518155/100/0/threaded","https://github.com/advisories/GHSA-2qx8-589j-gcpx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2011-16","url":"https://osv.dev/vulnerability/PYSEC-2011-16"}],"summary":"plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011."}