CVE-2023-42458
2 advisories.
PyPI/zope CVE-2023-42458: low 3.7
Zope vulnerable to Stored Cross Site Scripting with SVG images
Action: Upgrade zope to 4.8.10 or later.
pip install zope==4.8.10pip install zope==5.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.8.10 | - |
| 5.8.0 | 5.8.5 | - |
Fixed versions
| 4.8.10 | 5.8.5 |
Sources
- osv: GHSA-wm8q-9975-xh5v
- https://github.com/zopefoundation/Zope/security/advisories/GHSA-wm8q-9975-xh5v
- https://nvd.nist.gov/vuln/detail/CVE-2023-42458
- https://github.com/zopefoundation/Zope/commit/26a55dbc301db417f47cafda6fe0f983b5690088
- https://github.com/zopefoundation/Zope/commit/603b0a12881c90a072a7a65e32d47ed898ce37cb
- https://github.com/zopefoundation/Zope
- http://www.openwall.com/lists/oss-security/2023/09/22/2
CVE-2023-42458 · published · modified · JSON
PyPI/zope CVE-2023-42458: low 3.7
Zope vulnerable to Stored Cross Site Scripting with SVG images
Action: Upgrade zope to 4.8.10 or later.
pip install zope==4.8.10pip install zope==5.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.8.10 | - |
| 5.8.0 | 5.8.5 | - |
Fixed versions
| 4.8.10 | 5.8.5 |
Sources
- osv: PYSEC-2026-2077
- https://github.com/zopefoundation/Zope/security/advisories/GHSA-wm8q-9975-xh5v
- https://nvd.nist.gov/vuln/detail/CVE-2023-42458
- https://github.com/zopefoundation/Zope/commit/26a55dbc301db417f47cafda6fe0f983b5690088
- https://github.com/zopefoundation/Zope/commit/603b0a12881c90a072a7a65e32d47ed898ce37cb
- https://github.com/zopefoundation/Zope
- http://www.openwall.com/lists/oss-security/2023/09/22/2
- https://pypi.org/project/zope
- https://github.com/advisories/GHSA-wm8q-9975-xh5v
CVE-2023-42458 · published · modified · JSON