CVE-2009-0662
The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- plone:plonepas
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-pq3x-96c3-xgjg | PyPI | products-plonepas | >=3 <3.9 | 3.9 |
| PYSEC-2009-17 | PyPI | plone | >=3.0 <=3.1 <=3.2 <=3.3 <=3.4 <=3.5 | no fix published |
| PYSEC-2026-739 | PyPI | products-plonepas | >=3 <3.9 | 3.9 |