17 matches found
PYSEC-2026-760 Zope DocumentTemplate package allows unauthenticated write
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization...
CVE-2024-33866
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33865
An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...
CVE-2024-33866
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33866
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33866
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33866
The linqi process digitization program for Windows is affected by a Cross-Site Scripting (XSS) vulnerability in versions prior to 1.4.0.1 . The flaw exists specifically within the /api/DocumentTemplate/{GUID} API endpoint. Impacted users are advised to update to version 1.4.0.1 or later to resolv...
CVE-2024-33865
An NTLM hash leak vulnerability exists in the linqi process digitization program on Windows, affecting versions prior to 1.4.0.1 . The flaw is triggered via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID} endpoints. This exposure of sensitive information could allow an unauthorized actor to...
PT-2024-25520 · Linqi · Linqi
Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered that leads to an NTLM hash leak. This occurs via the "api/Cdn/GetFile" and "api/DocumentTemplate/GUID" endpoints. Recommendations: For versions prior to 1.4.0.1, update to...
CVE-2024-33866: Improper Neutralization of Input During Web Page Generation
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33865: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...
GHSA-J5CC-3H6R-JQH4 Zope DocumentTemplate package allows unauthenticated write
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization...
Zope DocumentTemplate package allows unauthenticated write
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization...
Zope < 2.1.7 DocumentTemplate Unauthorized Modification
Binary data 1444.prm...
Дырка в zope :)
Класс DocumentTemplate содержит методы, которые позволяют изменить характеристики класса удаленно через DTML без авторизации. Кроме того проблеммы с классом ZClasses. Часть небезопасных методов могут быть вызваны ограниченным пользователем...
CVE-2000-0483
The CVE-2000-0483 entry concerns the Zope DocumentTemplate package in Zope 2.2 and earlier. The issue allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization (unauthenticated write), representing a potential for content tampering. The root cause is a lack of proper a...
Conectiva Linux Security Announcement - ZOPE
---------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT ---------------------------------------------------------------------- PACKAGE: zope SUMMARY : Security problems in DocumentTemplate DATE : 2000-06-16 AFFECTED CONECTIVA VERSIONS : 4.2, 5....