Zope

Zope application server / web framework

v6.0

132.1K

downloads (30d)

Project Homepage

HIGH

Remote Code Execution via traversal in TAL expressions

CVE-2021-32633 · CVE-2021-32674 · GHSA-5vq5-pg3r-9ph3 · GHSA-962m-m8jw-8wrr · GHSA-rpcg-f9q6-2mq6 · PYSEC-2021-104 · PYSEC-2021-88

HIGH

ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

CVE-2002-0688

MODERATE

Zope allows attackers to modify raw image and file data

CVE-2000-1212

MODERATE

Information disclosure in AccessControl

CVE-2023-41050

HIGH

Zope does not properly restrict access to the getRoles method

CVE-2000-0725

HIGH

Zope does not properly verify the access for objects with proxy roles

CVE-2002-0170

HIGH

Remote Code Execution via Script (Python) objects under Python 3

CVE-2021-32807 · CVE-2021-32811 · GHSA-qcx9-j53g-ccgf · PYSEC-2021-335 · PYSEC-2021-368 · PYSEC-2021-370 · PYSEC-2021-875

MODERATE

Access control vulnerable to user data deletion by anonynmous users

CVE-2024-51734

HIGH

Zope does not properly perform security registration for legacy names

CVE-2000-1211

MODERATE

Zope DocumentTemplate package allows unauthenticated write

CVE-2000-0483

LOW

Zope management interface vulnerable to stored cross site scripting via the title property

CVE-2023-44389 · PYSEC-2023-193

HIGH

Zope Denial of Service (DoS) vulnerability in ZServer

CVE-2010-3198 · PYSEC-2010-32

HIGH

Remote Code Execution via traversal in TAL expressions

CVE-2021-32633 · CVE-2021-32674 · GHSA-5pr9-v234-jw36 · GHSA-5vq5-pg3r-9ph3 · GHSA-962m-m8jw-8wrr · PYSEC-2021-104 · PYSEC-2021-88

MODERATE

Zope XSS Vulnerability

CVE-2011-4924

MODERATE

Zope Server vulnerable to DoS via header injection

CVE-2002-0687

HIGH

Zope DTML implementation Improper Authentication

CVE-2000-0062

LOW

Zope vulnerable to Stored Cross Site Scripting with SVG images

CVE-2023-42458

UNKNOWN

PYSEC-2010-32

CVE-2010-3198 · GHSA-qh4q-fwf8-qqrw

UNKNOWN

PYSEC-2021-104

CVE-2021-32633 · CVE-2021-32674 · GHSA-5pr9-v234-jw36 · GHSA-5vq5-pg3r-9ph3 · GHSA-962m-m8jw-8wrr · GHSA-rpcg-f9q6-2mq6 · PYSEC-2021-88

UNKNOWN

PYSEC-2021-368

CVE-2021-32807 · CVE-2021-32811 · GHSA-g4gq-j4p2-j8fr · GHSA-qcx9-j53g-ccgf · PYSEC-2021-335 · PYSEC-2021-370 · PYSEC-2021-875

UNKNOWN

PYSEC-2021-875

CVE-2021-32807 · CVE-2021-32811 · GHSA-g4gq-j4p2-j8fr · GHSA-qcx9-j53g-ccgf · PYSEC-2021-335 · PYSEC-2021-368 · PYSEC-2021-370

UNKNOWN

PYSEC-2021-88

CVE-2021-32633 · CVE-2021-32674 · GHSA-5pr9-v234-jw36 · GHSA-5vq5-pg3r-9ph3 · GHSA-962m-m8jw-8wrr · GHSA-rpcg-f9q6-2mq6 · PYSEC-2021-104

UNKNOWN

PYSEC-2023-193

CVE-2023-44389 · GHSA-m755-gxxg-r5qh

Exclude CI/CDPRO

Best Day

9.2K

Apr 1

Worst Day

1.4K

Mar 8

Peaks On

Weds

6.3K avg

Quietest

Suns

2.2K avg

Download Trend

Badge

Markdown

[![PyPI Stats](/api/badges/Zope?period=month)](/packages/Zope)

HTML

<a href="/packages/Zope"><img src="/api/badges/Zope?period=month" alt="PyPI Stats"></a>

Package Info

Latest Version: 6.0
First Release: 2017-09-18

PyPI Compare