Skip to content
OpenAdvisories

Vendor

zopefoundation

20 known vulnerabilities.

Products

RestrictedPython 6 Zope 5 AccessControl 4 Products.PluggableAuthService 2 Products.SQLAlchemyDA 1 Products.CMFCore 1 Products.GenericSetup 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.7
    CVE-2021-21337 Public exploit

    URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService

    Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality c…

    zopefoundation Products.PluggableAuthService products-pluggableauthservice PyPI