Information disclosure

Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Gener...

CVE-2021-21360

CVE-2021-21360 affects the Products.GenericSetup mini-framework used with Zope. Affected versions are before 2.1.1 and allow anonymous visitors to view log and snapshot files generated by the Generic Setup Tool (information disclosure). The issue has been fixed in version 2.1.1.remediation steps ...