In short
- CVE-2006-4249 is a MEDIUM (CVSS 4.3) vulnerability affecting plone, plone (plone).
- Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.2% of all vulnerabilities.
- Fix: update to 2.5.2 or later.
| Package | Affected versions | Patched versions |
|---|
| plone PyPI | ≥ 2.5, < 2.5.2≤ 2.5
| 2.5.2
|
| plone | = 2.5= 2.5.1
| No fix yet |
Description
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."
NVD description
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free