Description
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | >= 2.5, < 2.5.2 | 2.5.2 | GHSA-r7j4-82xw-8m9p |
References
- 21460 vdb-entry
- http://plone.org/about/security/advisories/cve-2006-4249/
- 23240 third-party-advisory
- plone-group-spoofing(30762) vdb-entry
- ADV-2006-4878 vdb-entry