Lucene search

K
githubGitHub Advisory DatabaseGHSA-QH4Q-FWF8-QQRW
HistoryMay 17, 2022 - 5:48 a.m.

Zope Denial of Service (DoS) vulnerability in ZServer

2022-05-1705:48:31
CWE-400
GitHub Advisory Database
github.com
2

7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.7%

ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.

Affected configurations

Vulners
Node
github_advisory_databasezopeRange<2.11.7
OR
github_advisory_databasezopeRange<2.10.12
CPENameOperatorVersion
zopelt2.11.7
zopelt2.10.12

7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.7%

Related for GHSA-QH4Q-FWF8-QQRW