ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

Description

References

• nvd.nist.gov/vuln/detail/CVE-2002-0688 · ADVISORY
• web.archive.org/web/20020810160608/http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert · WEB
• web.archive.org/web/20020822025750/http://www.iss.net/security_center/static/9610.php · WEB
• web.archive.org/web/20021206023914/http://rhn.redhat.com/errata/RHSA-2002-060.html · WEB
• web.archive.org/web/20021223212650/http://online.securityfocus.com/bid/5812 · WEB
• web.archive.org/web/20070430090648/http://www.debian.org/security/2004/dsa-490 · WEB
• debian.org/security/2004/dsa-490
• iss.net/security_center/static/9610.php
• redhat.com/support/errata/RHSA-2002-060.html
• securityfocus.com/bid/5812
• zope.org/Products/Zope/Hotfix_2002-06-14/security_alert

zope의 다른 취약점

• CVE-2024-51734높음 8.7Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data main…
• CVE-2023-44389보통 4.8Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is …
• CVE-2023-42458보통 5.4Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for …
• CVE-2023-41050높음 7.7AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format s…
• CVE-2021-32811높음 7.2Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In…