Zope DTML implementation Improper Authentication

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2000-0062 · ADVISORY
• web.archive.org/web/20010218085743/http://www.securityfocus.com/bid/922 · WEB
• securityfocus.com/bid/922
• securityfocus.com/templates/archive.pike
• pypi.org/project/zope · PACKAGE
• GitHub Advisory GHSA-wcwp-r3fj-mm3p · ADVISORY

zope のその他の脆弱性

• CVE-2024-51734高 8.7Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data main…
• CVE-2023-44389中 4.8Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is …
• CVE-2023-42458中 5.4Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for …
• CVE-2023-41050高 7.7AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format s…
• CVE-2021-32811高 7.2Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In…