Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY3cTgtd3Z2aC1jOTdw

Moderate severity vulnerability that affects Zope2

Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.

Permalink: https://github.com/advisories/GHSA-v7q8-wvvh-c97p
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY3cTgtd3Z2aC1jOTdw
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 6 years ago
Updated: almost 2 years ago

EPSS Percentage: 0.00279
EPSS Percentile: 0.67946

Identifiers: GHSA-v7q8-wvvh-c97p, CVE-2010-1104
References:

Blast Radius: 0.0

Affected Packages

pypi:Zope2

Dependent packages: 9
Dependent repositories: 4
Downloads: 7,478 last month
Affected Version Ranges: >= 2.12.0, < 2.12.3, >= 2.11.0, < 2.11.6, >= 2.10.0, < 2.10.11, >= 2.9.0, < 2.9.12, >= 2.8.0, < 2.8.12
Fixed in: 2.12.3, 2.11.6, 2.10.11, 2.9.12, 2.8.12
All affected versions: 2.12.0, 2.12.1, 2.12.2
All unaffected versions: 2.12.3, 2.12.4, 2.12.5, 2.12.6, 2.12.7, 2.12.8, 2.12.9, 2.12.10, 2.12.11, 2.12.12, 2.12.13, 2.12.14, 2.12.15, 2.12.16, 2.12.17, 2.12.18, 2.12.19, 2.12.20, 2.12.21, 2.12.22, 2.12.23, 2.12.24, 2.12.25, 2.12.26, 2.12.27, 2.12.28, 2.13.0, 2.13.1, 2.13.2, 2.13.3, 2.13.4, 2.13.5, 2.13.6, 2.13.7, 2.13.8, 2.13.9, 2.13.10, 2.13.11, 2.13.12, 2.13.13, 2.13.14, 2.13.15, 2.13.16, 2.13.17, 2.13.18, 2.13.19, 2.13.20, 2.13.21, 2.13.22, 2.13.23, 2.13.24, 2.13.25, 2.13.26, 2.13.27, 2.13.28, 2.13.29, 2.13.30