Approved changes feed: RSS · Atom

cpe:2.3:a:zope:zope:2.7.9:*:*:*:*:*:*:*

part: a version: 2.7.9 update: *

VendorZope (400d8950-2847-5748-8fcd-7612c2170a9a)
ProductZope (0a3941f2-1c45-5687-af62-1666d59c833f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zopefoundation/zope purl2cpe 2026-06-01 10:18:07.254447
pkg:pypi/zope purl2cpe 2026-06-01 10:18:07.254449
pkg:sourceforge/zope purl2cpe 2026-06-01 10:18:07.254451

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5102 vulnerable 2026-06-08 04:50:49.600107 Details available
PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
Published: 2008-11-17T18:00:00.000Z
Updated: 2024-08-07T10:40:17.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4684 vulnerable 2026-06-08 04:49:18.546880 Details available
The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.
Published: 2006-09-19T18:00:00.000Z
Updated: 2024-08-07T19:23:41.180Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.