Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-4247

Fixed upstream EPSS 1%

Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."

Published 2006-09-29 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone2.5.1