Zope DocumentTemplate package allows unauthenticated write

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2000-0483 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/4716 · WEB
• web.archive.org/web/20000819120649/http://archives.neohapsis.com/archives/bugtraq/2000-06/0144.html · WEB
• web.archive.org/web/20000819123924/http://archives.neohapsis.com/archives/bugtraq/2000-07/0412.html · WEB
• web.archive.org/web/20010702023709/http://www.securityfocus.com/bid/1354 · WEB
• redhat.com/support/errata/RHSA-2000-038.html · WEB
• zope.org/Products/Zope/Hotfix_06_16_2000/security_alert · WEB
• ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A38.zope.asc
• archives.neohapsis.com/archives/bugtraq/2000-06/0144.html · Patch
• archives.neohapsis.com/archives/bugtraq/2000-07/0412.html

zope のその他の脆弱性

• CVE-2024-51734高 8.7Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data main…
• CVE-2023-44389中 4.8Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is …
• CVE-2023-42458中 5.4Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for …
• CVE-2023-41050高 7.7AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format s…
• CVE-2021-32811高 7.2Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In…