PyPI/zope2 CVE-2011-3587: high, EPSS 78.08%
Zope Command Execution Vulnerability
Action: Upgrade zope2 to 2.12.20 or later.
pip install zope2==2.12.20pip install zope2==2.13.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.12.0 | 2.12.20 | - |
| 2.13.0 | 2.13.10 | - |
Fixed versions
| 2.12.20 | 2.13.10 |
Sources
- osv: GHSA-8w48-m6hx-rjw2
- https://nvd.nist.gov/vuln/detail/CVE-2011-3587
- https://github.com/zopefoundation/Zope/commit/491a583d8c6622b80c75917e5017c4bb4b15e477
- https://github.com/zopefoundation/Zope/commit/6bb2fb3c04a76b00bec9bd7c069733e06fa6ebe9
- https://bugzilla.redhat.com/show_bug.cgi?id=742297
- https://github.com/pypa/advisory-database/tree/main/vulns/products-plonehotfix20110928/PYSEC-2011-26.yaml
- https://github.com/zopefoundation/Zope
- https://web.archive.org/web/20111013043934/http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
- http://plone.org/products/plone-hotfix/releases/20110928
- http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip
- http://plone.org/products/plone/security/advisories/20110928
- http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0
- http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
CVE-2011-3587 · published · modified · JSON