← All advisories

High severity7.5NVD Advisory· Published Jan 23, 2020· Updated Jun 17, 2026

CVE-2020-7940

CVE-2020-7940

Description

Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
PlonePyPI	>= 4.3, < 4.3.20	4.3.20
PlonePyPI	>= 5.0rc1, < 5.1.7	5.1.7
PlonePyPI	>= 5.2.0, < 5.2.2	5.2.2

Affected products

3

Plone (software)/Plone
cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*
Range: >=4.3.0,<=5.2.0
Plone/Plonedescription
ghsa-coords
pkg:pypi/plone
Range: >= 4.3, < 4.3.20

Patches

Vulnerability mechanics

References

7

www.openwall.com/lists/oss-security/2020/01/24/1nvdThird Party AdvisoryWEB
github.com/advisories/GHSA-cw58-gpgw-hwx2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7940ghsaADVISORY
plone.org/security/hotfix/20200121nvdVendor AdvisoryWEB
plone.org/security/hotfix/20200121/password-strength-checks-were-not-always-checkednvdVendor AdvisoryWEB
www.openwall.com/lists/oss-security/2020/01/22/1nvdMailing ListThird Party AdvisoryWEB
github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-89.yamlghsaWEB

News mentions

0

No linked articles in our index yet.