Debian Security Advisory DSA 910-1 (zope2.7)

The remote host is missing an update to zope2.7 announced via advisory DSA 910-1. A vulnerability has been discovered in zope 2.7, as Open Source web application server, that allows remote attackers to insert arbitrary files via include directives in reStructuredText functionality. The old stable...