Lucene search

K
freebsdFreeBSD34414A1E-E377-11DB-B8AB-000C76189C4C
HistoryJan 16, 2007 - 12:00 a.m.

zope -- cross-site scripting vulnerability

2007-01-1600:00:00
vuxml.freebsd.org
14

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

77.3%

The Zope Team reports:

A vulnerability has been discovered in Zope, where by certain types
of misuse of HTTP GET, an attacker could gain elevated privileges.
All Zope versions up to and including 2.10.2 are affected.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchzope< 2.7.9_2UNKNOWN
FreeBSDanynoarchplone< 2.5.3UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

77.3%

Related for 34414A1E-E377-11DB-B8AB-000C76189C4C