—

PYSEC-2006-10

Details

Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / plone

Introduced in: 0

No fixed version published yet for plone (pip). Pin to a known-safe version or switch to an alternative.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30762 [WEB]
http://www.vupen.com/english/advisories/2006/4878 [ADVISORY]
http://plone.org/about/security/advisories/cve-2006-4249/ [FIX]
http://secunia.com/advisories/23240 [FIX]
http://www.securityfocus.com/bid/21460 [FIX]