Description

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

Remediation

References

CVE-2002-0688

Related Vulnerabilities

WordPress Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2016-10033)

WordPress Plugin Wow Moodboard Lite Open Redirect (1.1.1.1)

GlassFish CVE-2012-3155 Vulnerability (CVE-2012-3155)

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17542)

PHP Resource Management Errors Vulnerability (CVE-2014-3538)

Severity

High

Classification

CVE-2002-0688

Tags

Missing Update Known Vulnerabilities