Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-B4B731E3D53DE9323ECB19C6A3D4D1B4
HistoryAug 02, 2021 - 12:00 a.m.

Improperly Controlled Modification of Dynamically-Determined Object Attributes

2021-08-0200:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
11
zope
web application server
remote code execution
security issue

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

82.9%

JSON

Zope is an open-source web application server. Zope versions have a remote code execution security issue.

Affected configurations

Vulners
Node
pypiml-scannerRange4.0≥pypi
OR
pypiml-scannerRange<4.3pypi
OR
pypiml-scannerRange5.0≥pypi
OR
pypiml-scannerRange<5.2pypi
VendorProductVersionCPE
pypiml-scanner*cpe:2.3:a:pypi:ml-scanner:*:*:*:*:*:pypi:*:*

Related

prion 1
openvas 1
cve 1
nvd 1
cvelist 1
veracode 1
github 1
ubuntucve 1
osv 8
prion
prion
Design/Logic Flaw
2021-08-02 22:15:00
openvas
openvas
Zope RCE Vulnerability (GHSA-g4gq-j4p2-j8fr)
2021-08-04 00:00:00
cve
cve
CVE-2021-32811
2021-08-02 22:15:08
nvd
nvd
CVE-2021-32811
2021-08-02 22:15:08
cvelist
cvelist
CVE-2021-32811 Remote Code Execution via Script (Python) objects under Python 3
2021-08-02 21:55:11
veracode
veracode
Remote Code Execution (RCE)
2021-08-04 06:34:34
github
github
Remote Code Execution via Script (Python) objects under Python 3
2021-08-05 17:00:37
ubuntucve
ubuntucve
CVE-2021-32811
2021-08-02 00:00:00
osv
osv
PYSEC-2021-370
2021-08-02 22:15:00
Remote Code Execution via Script (Python) objects under Python 3
2021-08-05 17:00:37
PYSEC-2021-875
2021-07-30 22:15:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

82.9%

JSON
Related for GITLAB-B4B731E3D53DE9323ECB19C6A3D4D1B4
prion1openvas1cve1nvd1cvelist1veracode1github1ubuntucve1osv8