CVE-2011-1950
Fixed upstream EPSS 2%
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.0.6 |
| PyPI | plone | 4.1.1 |
| PyPI | plone-app-users | 1.0.5 |
| PyPI | plone-app-users | 1.1.1 |