CVE-2021-21360

🗓️ 09 Mar 2021 00:30:16Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 79 Views

Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1, there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. The problem has been fixed in version 2.1.1

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2021-21360	9 Mar 202107:51	–	circl
CNNVD	GenericSetup 信息泄露漏洞	8 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-21360 Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup	9 Mar 202100:30	–	cvelist
EUVD	EUVD-2021-0198	7 Oct 202500:30	–	euvd
Github Security Blog	Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup	9 Mar 202100:38	–	github
NVD	CVE-2021-21360	9 Mar 202101:15	–	nvd
OpenVAS	Plone CMS <= 5.2.4 Multiple Vulnerabilities	27 May 202100:00	–	openvas
OSV	GHSA-JFF3-MWP3-F8CW Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup	9 Mar 202100:38	–	osv
OSV	PYSEC-2021-43	9 Mar 202101:15	–	osv
Prion	Information disclosure	9 Mar 202101:15	–	prion

NVD

Vulners

Node

zope products.genericsetupRange<2.1.1

[
  {
    "product": "Products.GenericSetup",
    "vendor": "zopefoundation",
    "versions": [
      {
        "status": "affected",
        "version": "< 2.1.1"
      }
    ]
  }
]

Source	Link
pypi	www.pypi.org/project/Products.GenericSetup/
github	www.github.com/zopefoundation/Products.GenericSetup/security/advisories/GHSA-jff3-mwp3-f8cw
openwall	www.openwall.com/lists/oss-security/2021/05/21/1
github	www.github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57
openwall	www.openwall.com/lists/oss-security/2021/05/22/1

21 Nov 2024 05:48Current

5Medium risk

Vulners AI Score5

CVSS 25

CVSS 3.15.3

EPSS0.00337

CWE-200