| Zope vulnerable to Stored Cross Site Scripting with SVG imagesCVE-2023-42458 · GHSA-WM8Q-9975-XH5VVersion ranges need review. |
zope |
PyPI |
Low
|
Fix reported |
|
| Zope management interface vulnerable to stored cross site scripting via the title propertyCVE-2023-44389 · GHSA-M755-GXXG-R5QHVersion ranges need review. |
zope |
PyPI |
Low
|
Fix reported |
|
| Information disclosure in AccessControlCVE-2023-41050 · GHSA-8XV7-89VJ-Q48CVersion ranges need review. |
accesscontrolzope |
PyPI |
Medium
|
Fix reported |
|
| Zope XSS VulnerabilityCVE-2011-4924 · GHSA-VH6G-786F-HXXPVersion ranges need review. |
zope2zope |
PyPI |
Medium
|
Fix reported |
|
| Access control vulnerable to user data deletion by anonynmous usersCVE-2024-51734 · GHSA-G5VW-3H65-2Q3VVersion ranges need review. |
accesscontrolzope |
PyPI |
Medium
|
Fix reported |
|
| Remote Code Execution via Script (Python) objects under Python 3CVE-2021-32811 · GHSA-G4GQ-J4P2-J8FRVersion ranges need review. |
accesscontrolzope |
PyPI |
High
|
Fix reported |
|
| Zope Denial of Service (DoS) vulnerability in ZServerCVE-2010-3198 · GHSA-QH4Q-FWF8-QQRWVersion ranges need review. |
zope |
PyPI |
High
|
Fix reported |
|
| Remote Code Execution via unsafe classes in otherwise permitted modulesCVE-2021-32807 · GHSA-QCX9-J53G-CCGFVersion ranges need review. |
accesscontrolzope |
PyPI |
Medium
|
Fix reported |
|
| Zope allows attackers to modify raw image and file dataCVE-2000-1212 · GHSA-7WHR-J8VF-R4WJVersion ranges need review. |
zope |
PyPI |
Medium
|
No fix reported |
|
| ZCatalog plug-in for Zope allows anonymous users to bypass access restrictionsCVE-2002-0688 · GHSA-7944-H5RW-QMJXVersion ranges need review. |
zope |
PyPI |
High
|
Fix reported |
|
| Zope DocumentTemplate package allows unauthenticated writeCVE-2000-0483 · GHSA-J5CC-3H6R-JQH4Version ranges need review. |
zope |
PyPI |
Medium
|
No fix reported |
|
| Zope does not properly perform security registration for legacy namesCVE-2000-1211 · GHSA-H2XH-JVPF-XQ42Version ranges need review. |
zope |
PyPI |
High
|
No fix reported |
|
| Zope does not properly restrict access to the getRoles methodCVE-2000-0725 · GHSA-9CMQ-PJ6P-HGWFVersion ranges need review. |
zope |
PyPI |
High
|
Fix reported |
|
| Zope DTML implementation Improper AuthenticationCVE-2000-0062 · GHSA-WCWP-R3FJ-MM3PVersion ranges need review. |
zope |
PyPI |
High
|
No fix reported |
|
| Zope does not properly verify the access for objects with proxy rolesCVE-2002-0170 · GHSA-C3RP-4CJH-CP38Version ranges need review. |
zope |
PyPI |
High
|
Fix reported |
|
| Zope Server vulnerable to DoS via header injectionCVE-2002-0687 · GHSA-VWRC-G9Q6-F675Version ranges need review. |
zope |
PyPI |
Medium
|
Fix reported |
|
| Remote Code Execution via traversal in TAL expressionsCVE-2021-32674 · GHSA-RPCG-F9Q6-2MQ6 |
zope |
PyPI |
High
|
Fix reported |
|
| Remote Code Execution via traversal in TAL expressionsCVE-2021-32633 · GHSA-5PR9-V234-JW36 |
zope |
PyPI |
High
|
Fix reported |
|
