Unscored DSA-490 1 CVE

zope - arbitrary code execution

Published Apr 17, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	zope	2.5.1-1woody1

Vulnerabilities 1

High —

CVE-2002-0688

ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

zope PyPI

Apr 2, 2003