zopefoundation

Records56All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

zopefoundation records in CISA KEV

No zopefoundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zope 36 records HIGH Zodb 4 records LOW Accesscontrol 3 records LOW Restrictedpython 3 records MEDIUM Products.pluggableauthservice 2 records LOW Grok 1 record LOW Products.cmfcore 1 record MEDIUM Products.genericsetup 1 record LOW

Records

3 records in Restrictedpython · all components

TI-2024-31821 CVE-2024-47532 · GHSA-5rfv-66g4-jr8h

RestrictedPython information leakage via `AttributeError.obj` and the `string` module

MEDIUM 45

RestrictedPython is a restricted execution environment for Python to run untrusted code.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00716 Published 2024-09-30 Fixed in 7.3 CWE-200

TI-2023-18901 CVE-2023-37271 · GHSA-wqc8-x2pr-7jqh

RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

MEDIUM 44

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00847 Published 2023-07-11 Fixed in 6.1, 5.3 CWE-913

TI-2023-21665 CVE-2023-41039 · GHSA-xjw2-6jm9-rf67

Sandbox escape via various forms of "format" in RestrictedPython

LOW 39

RestrictedPython is a restricted execution environment for Python to run untrusted code.

CVSS 3.1HIGH 8.3 Network High privileges User interaction EPSS 0.00683 Published 2023-08-30 Fixed in 5.4, 6.1 +1 CWE-74

Open these records in search →