{"action":"Upgrade zope2 to 2.7.8 or later.","affected":[{"fixed":"2.7.8","introduced":"2.7.0"},{"fixed":"2.8.7","introduced":"2.8.0"},{"fixed":"2.9.3","introduced":"2.9.0"}],"component":"zope2","cve_ids":["CVE-2006-3458"],"ecosystem":"PyPI","epss":0.00425,"exploited":false,"fixed_versions":["2.7.8","2.8.7","2.9.3"],"ghsa_id":"GHSA-jcjp-qqpq-pc54","id":"tcs_01M5KFNMPSBTMFFXKGWE1JCAJV","modified_at":"2024-11-22T05:12:32.910339Z","published_at":"2022-05-01T07:09:18Z","references":["https://osv.dev/vulnerability/GHSA-jcjp-qqpq-pc54","https://nvd.nist.gov/vuln/detail/CVE-2006-3458","https://exchange.xforce.ibmcloud.com/vulnerabilities/27636","https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2006-7.yaml","https://github.com/zopefoundation/Zope","https://usn.ubuntu.com/317-1","http://mail.zope.org/pipermail/zope-announce/2006-July/001984.html","http://www.debian.org/security/2006/dsa-1113","http://www.novell.com/linux/security/advisories/2006_19_sr.html"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-jcjp-qqpq-pc54","url":"https://osv.dev/vulnerability/GHSA-jcjp-qqpq-pc54"}],"summary":"Zope allows local users to read arbitrary files"}