Access control vulnerable to user data deletion by anonynmous users

概要

参考情報

• zopefoundation/AccessControl security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-51734 · ADVISORY
• zopefoundation/AccessControl · WEB
• zopefoundation/AccessControl · PACKAGE
• pypi.org/project/zope · PACKAGE
• GitHub Advisory GHSA-g5vw-3h65-2q3v · ADVISORY
• pypi.org/project/accesscontrol · PACKAGE

accesscontrol のその他の脆弱性

• CVE-2026-77401中 6.8Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create an…
• CVE-2023-41050高 7.7AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format s…
• CVE-2021-32811高 7.2Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In…
• CVE-2021-32807高 7.2The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is an…