Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS04dzQ4LW02aHgtcmp3Ms4AAf4M

Zope Command Execution Vulnerability

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Permalink: https://github.com/advisories/GHSA-8w48-m6hx-rjw2
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04dzQ4LW02aHgtcmp3Ms4AAf4M
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 2 years ago
Updated: 4 months ago

Identifiers: GHSA-8w48-m6hx-rjw2, CVE-2011-3587
References:

• https://nvd.nist.gov/vuln/detail/CVE-2011-3587
• https://bugzilla.redhat.com/show_bug.cgi?id=742297
• http://plone.org/products/plone-hotfix/releases/20110928
• http://plone.org/products/plone/security/advisories/20110928
• http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0
• https://github.com/zopefoundation/Zope/commit/491a583d8c6622b80c75917e5017c4bb4b15e477
• https://github.com/zopefoundation/Zope/commit/6bb2fb3c04a76b00bec9bd7c069733e06fa6ebe9
• https://web.archive.org/web/20111013043934/http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
• https://github.com/advisories/GHSA-8w48-m6hx-rjw2

Repository: https://github.com/zopefoundation/Zope
Blast Radius: 0.0

Affected Packages