Description

The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.

Remediation

References

CVE-2006-4684

Related Vulnerabilities

Oracle Database Server Other Vulnerability (CVE-2003-0727)

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15073)

axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-28168)

Django DEPRECATED: Code Vulnerability (CVE-2015-0219)

PHP Other Vulnerability (CVE-2015-8866)

Severity

Medium

Classification

CVE-2006-4684

Tags

Missing Update Known Vulnerabilities