Vendor/product archive

zope / accesscontrol CVEs

Beta · best-effort

3 CVEs tagged to zope / accesscontrol — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to zope vendor archive

CVE-2023-41050

Published Sep 6, 2023

AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format string to "read" objects accessible (rec…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-32811

Published Aug 2, 2021

Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Pyt…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-32807

Published Jul 30, 2021

The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object da…

CVSS 4.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1