2.1

CVE-2006-3458

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

Data is provided by the National Vulnerability Database (NVD)
Zope ≫ Zope Version2.7.0
Zope ≫ Zope Version2.7.1
Zope ≫ Zope Version2.7.2
Zope ≫ Zope Version2.7.3
Zope ≫ Zope Version2.7.4
Zope ≫ Zope Version2.7.5
Zope ≫ Zope Version2.7.6
Zope ≫ Zope Version2.7.7
Zope ≫ Zope Version2.7.8
Zope ≫ Zope Version2.8.0
Zope ≫ Zope Version2.8.1
Zope ≫ Zope Version2.8.2
Zope ≫ Zope Version2.8.3
Zope ≫ Zope Version2.8.4
Zope ≫ Zope Version2.8.5
Zope ≫ Zope Version2.8.6
Zope ≫ Zope Version2.8.7
Zope ≫ Zope Version2.9.0
Zope ≫ Zope Version2.9.1
Zope ≫ Zope Version2.9.2
Zope ≫ Zope Version2.9.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.252
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N