Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-8W48-M6HX-RJW2
HistoryMay 17, 2022 - 5:37 a.m.

Zope Command Execution Vulnerability

2022-05-1705:37:39
GitHub Advisory Database
github.com
7

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

JSON

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Affected configurations

Vulners
Node
zope2Range<2.13.10
OR
zope2Range<2.12.20
CPENameOperatorVersion
zope2lt2.13.10
zope2lt2.12.20

Related

exploitpack 1
nvd 2
saint 4
seebug 2
prion 2
packetstorm 2
d2 1
checkpoint_advisories 1
cvelist 2
cve 2
canvas 1
nessus 1
dsquare 1
osv 1
exploitdb 1
github 1
exploitpack
exploitpack
Plone and Zope - Remote Command Execution
2011-12-21 00:00:00
nvd
nvd
CVE-2011-3587
2011-10-10 10:55:06
CVE-2011-4030
2011-10-10 10:55:06
saint
saint
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
seebug
seebug
Plone and Zope Remote Command Execution PoC
2014-07-01 00:00:00
Zopeζ‘†ζžΆ&quot;cmd&quot;ε‚ζ•°θΏœη¨‹ε‘½δ»€ζ‰§θ‘ŒζΌζ΄ž
2011-12-26 00:00:00
prion
prion
Design/Logic Flaw
2011-10-10 10:55:00
Design/Logic Flaw
2011-10-10 10:55:00
packetstorm
packetstorm
Plone and Zope Remote CMD Injection Exploit
2011-12-28 00:00:00
Plone / Zope Remote Command Execution
2011-12-21 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_ZOPEPLONE
2011-10-10 10:55:00
checkpoint_advisories
checkpoint_advisories
Plone and Zope cmd Parameter Remote Command Execution (CVE-2011-3587)
2014-11-02 00:00:00
cvelist
cvelist
CVE-2011-3587
2011-10-10 10:00:00
CVE-2011-4030
2011-10-10 10:00:00
cve
cve
CVE-2011-3587
2011-10-10 10:55:06
CVE-2011-4030
2011-10-10 10:55:06
canvas
canvas
Immunity Canvas: PLONE
2011-10-10 10:55:00
nessus
nessus
Plone Request Parsing Remote Command Execution
2011-12-20 00:00:00
dsquare
dsquare
Plone RCE
2012-01-26 00:00:00
osv
osv
Zope Command Execution Vulnerability
2022-05-17 05:37:39
exploitdb
exploitdb
Plone and Zope - Remote Command Execution
2011-12-21 00:00:00
github
github
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
2022-05-17 05:37:14

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

JSON
Related for GHSA-8W48-M6HX-RJW2
exploitpack1nvd2saint4seebug2prion2packetstorm2d21checkpoint_advisories1cvelist2cve2canvas1nessus1dsquare1osv1exploitdb1github1