Zope does not properly perform security registration for legacy names

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2000-1211 · ADVISORY
• web.archive.org/web/20010910131909/http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · WEB
• web.archive.org/web/20021227061438/http://www.iss.net/security_center/static/5824.php · WEB
• redhat.com/support/errata/RHSA-2000-125.html · WEB
• zope.org/Products/Zope/Hotfix_2000-12-08/security_alert · WEB
• iss.net/security_center/static/5824.php
• linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · Patch
• osvdb.org/6282
• pypi.org/project/zope · PACKAGE
• GitHub Advisory GHSA-h2xh-jvpf-xq42 · ADVISORY

Lỗ hổng khác của zope

• CVE-2024-51734CAO 8.7Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data main…
• CVE-2023-44389TRUNG BÌNH 4.8Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is …
• CVE-2023-42458TRUNG BÌNH 5.4Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for …
• CVE-2023-41050CAO 7.7AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format s…
• CVE-2021-32811CAO 7.2Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In…