Description
Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | >= 4.3, < 4.3.20 | 4.3.20 | GHSA-cw58-gpgw-hwx2 |
| PyPI | plone | >= 5.0rc1, < 5.1.7 | 5.1.7 | GHSA-cw58-gpgw-hwx2 |
| PyPI | plone | >= 5.2.0, < 5.2.2 | 5.2.2 | GHSA-cw58-gpgw-hwx2 |
| PyPI | plone | >= 4.3, < 5.2.1 | 5.2.1 | PYSEC-2020-89 |