GitHub Advisoryadvisory · PyPI
GHSA-8w48-m6hx-rjw2 Zope Command Execution Vulnerability
HIGH
Official page ↗
- Aliases
- CVE-2011-3587
- Ecosystem
- PyPI
- Packages
- zope2
- Severity
- High
- Reviewed
- 2024-01-15
Affected packages
• PyPI zope2: >= 2.12.0, < 2.12.20 → fixed in 2.12.20
• PyPI zope2: >= 2.13.0, < 2.13.10 → fixed in 2.13.10
Description
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the `p_` class in `OFS/misc_.py` and the use of Python modules.
Related
Alias · CVE (1)
- CVE-2011-3587 Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2011-3587 advisory
- https://github.com/zopefoundation/Zope/commit/491a583d8c6622b80c75917e5017c4bb4b15e477 web
- https://github.com/zopefoundation/Zope/commit/6bb2fb3c04a76b00bec9bd7c069733e06fa6ebe9 web
- https://bugzilla.redhat.com/show_bug.cgi?id=742297 web
- https://github.com/pypa/advisory-database/tree/main/vulns/products-plonehotfix20110928/PYSEC-2011-26.yaml web
- https://github.com/zopefoundation/Zope package
- https://web.archive.org/web/20111013043934/http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587 web
- http://plone.org/products/plone-hotfix/releases/20110928 web
- http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip web
- http://plone.org/products/plone/security/advisories/20110928 web
- http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0 web
- http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587 web