accesscontrol
PyPI5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting accesscontrolpage 1 of 1
- CVE-2021-32807MEDIUMCVSS 4.4EG 4.4fixed in 4.3 or 5.2, by version range2021-07-30
vulnerable: 4.0, 4.1, 4.2, 5.0, 5.1
The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the contents of `Script (Python)` objects. T…
- CVE-2021-32811HIGHCVSS 7.5EG 7.5fixed in 4.3 or 5.2, by version range2021-08-02
vulnerable: 4.0, 4.1, 4.2, 5.0, 5.1
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.…
- CVE-2023-41050HIGHCVSS 7.7EG 7.7fixed in 4.4, 5.8 or 6.2, by version range2023-09-06
vulnerable: 2.13.0 ... 6.1 (61 versions)
AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format string to "read" objects accessible (recursively) via attribute access and subscription from accessi…
- CVE-2024-51734HIGHCVSS 8.7EG 8.7fixed in 7.22024-11-04
vulnerable: 2.13.0 ... 7.1 (66 versions)
Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This pr…
- CVE-2026-77401MEDIUMCVSS 6.8EG 6.8fixed in 7.42026-09-16
vulnerable: 2.13.0 ... 7.3 (68 versions)
Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create and execute AccessControl-controlled Python code do not safely guard str.format and str.format_map wh…
Check whether accesscontrol is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for accesscontrol CVEs against the assets you own.
Book a Demo →