Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-8W48-M6HX-RJW2
HistoryMay 17, 2022 - 5:37 a.m.

Zope Command Execution Vulnerability

2022-05-1705:37:39
GitHub Advisory Database
github.com
8
zope
plone
remote attackers
arbitrary commands
python modules
vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.967

Percentile

99.7%

JSON

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Affected configurations

Vulners
Node
zope2Range2.13.0–2.13.10
OR
zope2Range2.12.0–2.12.20
VendorProductVersionCPE
*zope2*cpe:2.3:a:*:zope2:*:*:*:*:*:*:*:*

Related

exploitpack 1
saint 4
metasploit 1
exploitdb 1
nvd 2
seebug 2
prion 2
packetstorm 2
dsquare 1
osv 1
nessus 1
d2 1
checkpoint_advisories 1
cvelist 2
zdt 1
canvas 1
cve 2
github 1
exploitpack
exploitpack
Plone and Zope - Remote Command Execution
2011-12-21 00:00:00
saint
saint
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
metasploit
metasploit
Plone and Zope XMLTools Remote Command Execution
2011-12-27 06:59:26
exploitdb
exploitdb
Plone and Zope - Remote Command Execution
2011-12-21 00:00:00
nvd
nvd
CVE-2011-3587
2011-10-10 10:55:06
CVE-2011-4030
2011-10-10 10:55:06
seebug
seebug
Plone and Zope Remote Command Execution PoC
2014-07-01 00:00:00
Zopeζ‘†ζžΆ"cmd"ε‚ζ•°θΏœη¨‹ε‘½δ»€ζ‰§θ‘ŒζΌζ΄ž
2011-12-26 00:00:00
prion
prion
Design/Logic Flaw
2011-10-10 10:55:00
Design/Logic Flaw
2011-10-10 10:55:00
packetstorm
packetstorm
Plone and Zope Remote CMD Injection Exploit
2011-12-28 00:00:00
Plone / Zope Remote Command Execution
2011-12-21 00:00:00
dsquare
dsquare
Plone RCE
2012-01-26 00:00:00
osv
osv
Zope Command Execution Vulnerability
2022-05-17 05:37:39
nessus
nessus
Plone Request Parsing Remote Command Execution
2011-12-20 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_ZOPEPLONE
2011-10-10 10:55:00
checkpoint_advisories
checkpoint_advisories
Plone and Zope cmd Parameter Remote Command Execution (CVE-2011-3587)
2014-11-02 00:00:00
cvelist
cvelist
CVE-2011-3587
2011-10-10 10:00:00
CVE-2011-4030
2011-10-10 10:00:00
zdt
zdt
Plone and Zope Remote Command Execution PoC
2011-12-21 00:00:00
canvas
canvas
Immunity Canvas: PLONE
2011-10-10 10:55:00
cve
cve
CVE-2011-3587
2011-10-10 10:55:06
CVE-2011-4030
2011-10-10 10:55:06
github
github
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
2022-05-17 05:37:14

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.967

Percentile

99.7%

JSON
Related for GHSA-8W48-M6HX-RJW2
exploitpack1saint4metasploit1exploitdb1nvd2seebug2prion2packetstorm2dsquare1osv1nessus1d21checkpoint_advisories1cvelist2zdt1canvas1cve2github1