GHSA-c3rp-4cjh-cp38High

Zope does not properly verify the access for objects with proxy roles

Published
April 30, 2022
Last Modified
February 12, 2024

🔗 CVE IDs covered (1)

CVE-2002-0170 →

📋 Description

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.

🎯 Affected products2

  • pip/zope:>= 2.2.0, < 2.4.4
  • pip/zope:>= 2.5.0, < 2.5.1

🔗 References (8)