| Package | Affected versions | Patched versions |
|---|---|---|
| zope2 | ≥ 2.7.0, < 2.7.8≥ 2.8.0, < 2.8.7≥ 2.9.0, < 2.9.3all versions | 2.7.82.8.72.9.3 |
| zope | = 2.7.0= 2.7.1= 2.7.2= 2.7.3= 2.7.4= 2.7.5= 2.7.6= 2.7.7= 2.7.8= 2.8.0= 2.8.1= 2.8.2= 2.8.3= 2.8.4= 2.8.5= 2.8.6= 2.8.7= 2.9.0= 2.9.1= 2.9.2= 2.9.3 |
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free