Skip to content
OpenAdvisories
Unscored DSA-1176-1 1 CVE

zope2.7

Published Sep 13, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 zope2.7 2.7.5-2sarge2

Vulnerabilities 1

  • Medium —

    Zope allows remote attackers to read arbitrary files

    The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability …