Vulnerabilities

TI-2023-21676 CVE-2023-41050 · GHSA-8xv7-89vj-q48c

Information disclosure through Python's "format" functionality in Zope AccessControl

LOW 35

AccessControl provides a general security framework for use in Zope.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00641 Published 2023-09-06 Fixed in 4.4, 4.8.9 +3 CWE-200

TI-2021-12476 CVE-2021-32811 · GHSA-g4gq-j4p2-j8fr

LOW 37

Zope is an open-source web application server.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02296 Published 2021-08-02 Fixed in 4.6.3, 5.3 CWE-915

TI-2021-12472 CVE-2021-32807 · GHSA-qcx9-j53g-ccgf

LOW 36

The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02107 Published 2021-07-30 Fixed in 4.3, 5.2 CWE-915