GHSA-cw58-gpgw-hwx2

Plone allows weak passwords

Source: GitHub Advisory Database (reviewed) High CVE-2020-7940

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	Plone	>= 4.3, < 4.3.20	4.3.20
PyPI	Plone	>= 5.0rc1, < 5.1.7	5.1.7
PyPI	Plone	>= 5.2.0, < 5.2.2	5.2.2

As written in the advisory (Markdown source, shown as plain text).

Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.

External links from the advisory. They lead to third-party sites.