GHSA-8w48-m6hx-rjw2
Suggest an improvement- Source
- https://github.com/advisories/GHSA-8w48-m6hx-rjw2
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-8w48-m6hx-rjw2/GHSA-8w48-m6hx-rjw2.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-8w48-m6hx-rjw2
- Aliases
-
- CVE-2011-3587
- Published
- 2022-05-17T05:37:39Z
- Modified
- 2024-12-03T05:26:28.676704Z
- Summary
- Zope Command Execution Vulnerability
- Details
-
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the
p_class inOFS/misc_.pyand the use of Python modules. - Database specific
{ "nvd_published_at": "2011-10-10T10:55:00Z", "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-01-15T18:14:23Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2011-3587
- https://github.com/zopefoundation/Zope/commit/491a583d8c6622b80c75917e5017c4bb4b15e477
- https://github.com/zopefoundation/Zope/commit/6bb2fb3c04a76b00bec9bd7c069733e06fa6ebe9
- https://bugzilla.redhat.com/show_bug.cgi?id=742297
- https://github.com/pypa/advisory-database/tree/main/vulns/products-plonehotfix20110928/PYSEC-2011-26.yaml
- https://github.com/zopefoundation/Zope
- https://web.archive.org/web/20111013043934/http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
- http://plone.org/products/plone-hotfix/releases/20110928
- http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip
- http://plone.org/products/plone/security/advisories/20110928
- http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0
- http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
Affected packages
PyPI / zope2
Package
- Name
- zope2
- View open source insights on deps.dev
- Purl
- pkg:pypi/zope2
PyPI / zope2
Package
- Name
- zope2
- View open source insights on deps.dev
- Purl
- pkg:pypi/zope2