Plone allows a user to masquerade as a group

中危 4.3CVE-2006-4249 · GHSA-r7j4-82xw-8m9p · PYSEC-2006-10 · Published 07/12/2006 · updated 16/06/2026

要点

CVE-2006-4249 是影响 plone, plone (plone) 的中危 (CVSS 4.3)漏洞。
未来 30 天内被利用的概率（EPSS）：1.0%，高于 63.2% 的漏洞。
修复：升级到 2.5.2 或更高版本。

Package	Affected versions	Patched versions
plone PyPI	`≥ 2.5, < 2.5.2≤ 2.5`	`2.5.2`
plone plone	`= 2.5= 2.5.1`	No fix yet

Description

Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."

NVD description

Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."

References

nvd.nist.gov/vuln/detail/CVE-2006-4249 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/30762 · WEB
plone/Plone · PACKAGE
pypa/advisory-database · WEB
pypa/advisory-database · WEB
plone.org/about/security/advisories/cve-2006-4249 · WEB
plone.org/products/plone-hotfix/releases/20061031 · WEB
secunia.com/advisories/23240 · WEB
securityfocus.com/bid/21460 · WEB
vupen.com/english/advisories/2006/4878 · WEB
plone.org/about/security/advisories/cve-2006-4249 · Patch
GitHub Advisory GHSA-r7j4-82xw-8m9p · ADVISORY

plone 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

plone

PyPI

≥ 2.5, < 2.5.2≤ 2.5

2.5.2

plone

= 2.5= 2.5.1

No fix yet

Description

Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."

NVD description

Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."

plone 的其他漏洞

查看全部 →