CVE-2021-21360

Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Gener...

Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup

Impact What kind of vulnerability is it? Who is impacted? Information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. Patches Has the problem been patched? What versions should users upgrade to? The problem has been fixed in versi...

GenericSetup 信息泄露漏洞

GenericSetup is an open source mini-framework for representing the configuration state of a Zope Site as a set of file system artifacts. An information disclosure vulnerability exists in versions of GenericSetup prior to 2.1.1 that stems from allowing an anonymous visitor to potentially view log...