Skip to content
OpenAdvisories

Product · zopefoundation

Products.PluggableAuthService

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.7
    CVE-2021-21337 Public exploit

    URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService

    Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality c…

    zopefoundation Products.PluggableAuthService products-pluggableauthservice PyPI
  • Medium 6.5
    CVE-2021-21336

    Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager

    Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Rol…

    zopefoundation Products.PluggableAuthService products-pluggableauthservice PyPI