GHSA-vwrc-g9q6-f675Medium

Zope Server vulnerable to DoS via header injection

Published
April 30, 2022
Last Modified
February 12, 2024

🔗 CVE IDs covered (1)

CVE-2002-0687 →

📋 Description

Zope is a Web application server for Linux. Zope versions 2.0 through 2.5.1 b1 are vulnerable to a denial of service attack, caused by a vulnerability that occurs when using the "through the Web code" capability. A remote attacker could inject malicious headers into a response to cause the vulnerable system to crash.

🎯 Affected products2

  • pip/zope:>= 2.0.0, < 2.4.4b2
  • pip/zope:>= 2.5.0, < 2.5.1b2

🔗 References (9)