Description
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
Remediation
References
Related Vulnerabilities
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.1)
MySQL CVE-2021-2070 Vulnerability (CVE-2021-2070)
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999003)
Apache Tomcat Untrusted Search Path Vulnerability (CVE-2025-49124)
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2025-5115)