Zopefoundation Zope
5 CVEs affecting Zopefoundation Zope. Latest disclosed: 2023-10-04. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-32674 | High | 8.8 | 2021-06-08 | Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5… |
CVE-2021-32811 | High | 7.5 | 2021-08-02 | Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affect… |
CVE-2021-32633 | Medium | 6.8 | 2021-05-21 | Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that… |
CVE-2023-42458 | Low | 3.7 | 2023-09-21 | Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for SVG images. Note th… |
CVE-2023-44389 | Low | 3.1 | 2023-10-04 | Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while view… |