Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/plone@2.5.1
purl pkg:pypi/plone@2.5.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.6
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
PYSEC-2006-10
Aliases:
CVE-2006-4249
GHSA-r7j4-82xw-8m9p
PYSEC-2006-6
Withdrawn as duplicate of PYSEC-2006-6. Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, … There are no reported fixed by versions.
GHSA-r7j4-82xw-8m9p
Aliases:
CVE-2006-4249
Plone allows a user to masquerade as a group Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2006-4247
Plone allows anonymous users to reset any users password through the web via Password Reset Tool Unspecified vulnerability in the … GHSA-5hch-v5pq-x4qp
PYSEC-2006-5
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset … CVE-2006-4247
GHSA-5hch-v5pq-x4qp