Skip to content
OpenAdvisories

Vendor

zopefoundation

20 known vulnerabilities.

Products

RestrictedPython 6 Zope 5 AccessControl 4 Products.PluggableAuthService 2 Products.SQLAlchemyDA 1 Products.CMFCore 1 Products.GenericSetup 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2023-44389

    Zope management interface vulnerable to stored cross site scripting via the title property

    Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface (ZMI). All versions of Zope 4 and Zope 5 ar…

    zopefoundation Zope zope PyPI
  • Low 3.7
    CVE-2023-42458

    Zope vulnerable to Stored Cross Site Scripting with SVG images

    Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for SVG images. Note that an image tag with an SVG image as source is never vulnerable, even when the SVG image contains ma…

    zopefoundation Zope zope PyPI