Description
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
Remediation
References
Related Vulnerabilities
Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10324)
WordPress Plugin Moova for WooCommerce Cross-Site Scripting (3.5)
Drupal Use of Web Browser Cache Containing Sensitive Information Vulnerability (CVE-2025-13083)
OpenSSL Resource Management Errors Vulnerability (CVE-2008-1678)
ownCloud Improper Access Control Vulnerability (CVE-2016-9467)