Description

Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."

Remediation

References

CVE-2006-4249

Related Vulnerabilities

Apache Tomcat Insufficiently Protected Credentials Vulnerability (CVE-2019-12418)

Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20140)

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-26071)

WordPress Plugin DW Question & Answer Cross-Site Scripting (1.4.2.2)

WordPress Plugin WP-SpamFree Anti-Spam 'id' Parameter SQL Injection (3.2.1)

Severity

Medium

Classification

CVE-2006-4249

Tags

Missing Update Known Vulnerabilities