Skip to content
OpenAdvisories

Package · PyPI

accesscontrol

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2024-51734

    User data deletion by anoynmous users in Zope

    Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This problem has been fixed…

    zopefoundation AccessControl zope accesscontrol PyPI
  • High 7.5
    CVE-2021-32811

    Remote Code Execution via Script (Python) objects under Python 3

    Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.6.3 or Zope 5 below …

    zopefoundation Zope zope accesscontrol Ubuntu PyPI