Skip to content
OpenAdvisories

Package · PyPI

zope2

11 known vulnerabilities.

1 result · Clear filters · Feed

  • Low —

    Zope allows local users to read arbitrary files

    Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.