CVE-2023-44389lowCWE-79

CVE-2023-44389: falha de baixa gravidade em zopefoundation Zope

Zope management interface vulnerable to stored cross site scripting via the title property

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Zope+ Monitorar zope

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.1epss 0.5%
Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface (ZMI). All versions of Zope 4 and Zope 5 are affected. Patches will be released with Zope versions 4.8.11 and 5.8.6.
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N
Produtos afetados
zopefoundation · Zope
CVEs relacionadas — zopefoundation Zope

No mesmo produto, das mais perigosas para as menos.

CVE-2021-32811HIGHRemote Code Execution via Script (Python) objects under Python 3EPSS 2.3%CVE-2021-32633MEDIUMRemote Code Execution via traversal in TAL expressionsEPSS 1.9%CVE-2021-32674HIGHRemote Code Execution via traversal in TAL expressionsEPSS 1.6%CVE-2023-42458LOWZope vulnerable to Stored Cross Site Scripting with SVG imagesEPSS 0.7%