Description

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

Remediation

References

CVE-2006-3458

Related Vulnerabilities

Joomla Improper Input Validation Vulnerability (CVE-2020-35616)

Python Integer Overflow or Wraparound Vulnerability (CVE-2015-1283)

MySQL Other Vulnerability (CVE-2002-1375)

WebLogic CVE-2020-14644 Vulnerability (CVE-2020-14644)

PHP Out-of-bounds Read Vulnerability (CVE-2019-11040)

Severity

Low

Classification

CVE-2006-3458

Tags

Missing Update Known Vulnerabilities