zope vulnerabilities (PyPI)
18 vulnerabilities.
-
zopePyPI User data deletion by anoynmous users in Zope 8.7 High -
zopePyPI Zope management interface vulnerable to stored cross site scripting via the title property 3.1 Low -
zopePyPI Zope vulnerable to Stored Cross Site Scripting with SVG images 3.7 Low -
zopePyPI Information disclosure through Python's "format" functionality in Zope AccessControl 6.8 Medium -
zopePyPI Remote Code Execution via Script (Python) objects under Python 3 7.5 High -
zopePyPI Remote Code Execution via unsafe classes in otherwise permitted modules 4.4 Medium -
zopePyPI Remote Code Execution via traversal in TAL expressions 8.8 High -
zopePyPI Remote Code Execution via traversal in TAL expressions 6.8 Medium -
zopePyPI Zope XSS Vulnerability 6.1 Medium -
zopePyPI Zope Denial of Service (DoS) vulnerability in ZServer 4.3 Medium -
zopePyPI ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions 7.5 High -
zopePyPI Zope Server vulnerable to DoS via header injection 5.0 Medium -
zopePyPI Zope does not properly verify the access for objects with proxy roles 7.5 High -
zopePyPI Zope allows attackers to modify raw image and file data 5.0 Medium -
zopePyPI Zope does not properly perform security registration for legacy names 7.5 High -
zopePyPI Zope does not properly restrict access to the getRoles method 7.2 High -
zopePyPI Zope DocumentTemplate package allows unauthenticated write 7.5 High -
zopePyPI Zope DTML implementation Improper Authentication 10.0 High