VDB
KO

PYSEC-2020-89

Details

Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / plone
Introduced in: 4.3 Fixed in: 5.2.1
Fix pip install --upgrade 'plone>=5.2.1'

References