Unscored severity · published Jul 23, 2002
CVE-2002-0688
ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of…
–
CVSS
1.4%
EPSS
No
On KEV
Description
ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZO
Zope · Zope
2.4.0; 2.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0688
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0688
www.debian.org
http://www.debian.org/security/2004/dsa-490
www.iss.net
http://www.iss.net/security_center/static/9610.php
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2002-060.html
www.securityfocus.com
http://www.securityfocus.com/bid/5812
Patch
http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert
More from Zope
8.8
CVE-2021-32674
Zope is an open-source web application server
8.8
CVE-2021-32633
Zope is an open-source web application server
7.7
CVE-2023-41050
Information disclosure through Python's "format" functionality in Zope AccessControl
7.2
CVE-2021-32811
Zope is an open-source web application server
6.1
CVE-2021-33507
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS