CVE-2002-0688

Zope 2.4.0-2.5.1 - Unauthenticated Arbitrary Method Execution via ZCatalog Plug-in Index

Title source: llm
STIX 2.1

Description

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

References (5)

Core 5
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-490
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9610.php
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-060.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5812
Patch, Vendor Advisory x_refsource_confirm
http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert

Scores

EPSS 0.0143
EPSS Percentile 70.2%

Details

Status published
Products (3)
pypi/zope 2.4.0 - 2.6.0PyPI
zope/zope 2.4.0
zope/zope 2.5.1
Published Jul 23, 2002
Tracked Since Feb 18, 2026