PYSEC-2026-739
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/products-plonepas/PYSEC-2026-739.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-739
- Aliases
-
- CVE-2009-0662
- GHSA-pq3x-96c3-xgjg
- PYSEC-2009-17
- Published
- 2026-07-02T14:13:08Z
- Modified
- 2026-07-06T08:11:19Z
- Summary
- Moderate severity vulnerability that affects Products.PlonePAS
- Details
-
The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2009-0662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50061
- https://github.com/advisories/GHSA-pq3x-96c3-xgjg
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2009-17.yaml
- http://osvdb.org/53975
- http://plone.org/products/plone/security/advisories/cve-2009-0662
- http://secunia.com/advisories/34840
- http://www.securityfocus.com/bid/34664
- https://pypi.org/project/products-plonepas
Affected packages
PyPI / products-plonepas
Package
- Name
- products-plonepas
- View open source insights on deps.dev
- Purl
- pkg:pypi/products-plonepas