Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2006-3458
2.1
LOWCVSS v2
Published
July 7, 2006
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.
zopefoundation/Zope
GitHubZope is an open-source web application server.
GitHubZope is an open-source web application server.= 2.8.0, = 2.7.0, = 2.9.2, = 2.7.6, = 2.7.5, = 2.9.1, = 2.7.3, = 2.9.0, = 2.8.5, = 2.7.4, = 2.8.3, = 2.7.1, = 2.7.8, = 2.7.7, = 2.8.6, = 2.8.7, = 2.8.4, = 2.7.2, = 2.8.1, = 2.8.2, = 2.9.3NVD