affected:
- package:
    ecosystem: PyPI
    name: plone
    purl: pkg:pypi/plone
  ranges:
  - events:
    - introduced: '2.5'
    - fixed: 2.5.1
    type: ECOSYSTEM
aliases:
- CVE-2006-4247
- GHSA-5hch-v5pq-x4qp
details: Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
id: PYSEC-2006-5
modified: '2026-07-09T16:03:00Z'
published: '2006-09-29T19:07:00Z'
references:
- type: ADVISORY
  url: http://plone.org/about/security/advisories/cve-2006-4247
- type: ADVISORY
  url: https://github.com/advisories/GHSA-5hch-v5pq-x4qp