Moderate severity vulnerability that affects Plone and plone.app.users · CVE-2011-1950 · GitHub Advisory Database · GitHub

Moderate severity vulnerability that affects Plone and plone.app.users

Moderate severity GitHub Reviewed Published Jul 23, 2018 to the GitHub Advisory Database • Updated Jan 9, 2023

Package

Plone (pip)

Affected versions

>= 4.0.1, < 4.0.6

Patched versions

4.0.6

plone.app.users (pip)

>= 1.0a1, < 1.0.5

>= 1.1b1, < 1.1.1

1.0.5

1.1.1

Description

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

References

Published to the GitHub Advisory Database Jul 23, 2018

Reviewed Jun 16, 2020

Last updated Jan 9, 2023