Skip to content
OpenAdvisories

Product · zopefoundation

AccessControl

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2024-51734

    User data deletion by anoynmous users in Zope

    Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This problem has been fixed…

    zopefoundation AccessControl zope accesscontrol PyPI