accesscontrol
PyPI4 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting accesscontrolpage 1 of 1
- CVE-2021-32807MEDIUMCVSS 4.4EG 4.4✓ Fixed in 5.22021-07-30
vulnerable: 4.0, 4.1, 4.2, 5.0, 5.1
The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the contents of `Script (Python)` objects. T…
- CVE-2021-32811HIGHCVSS 7.5EG 7.5✓ Fixed in 5.22021-08-02
vulnerable: 4.0, 4.1, 4.2, 5.0, 5.1
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.…
- CVE-2023-41050MEDIUMCVSS 6.8EG 6.8✓ Fixed in 6.22023-09-06
vulnerable: 6.0, 6.1
AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format string to "read" objects accessible (recursively) via attribute access and subscription from accessi…
- CVE-2024-51734HIGHCVSS 8.7EG 0.0✓ Fixed in 7.22024-11-04
vulnerable: 2.13.0 ... 7.1 (66 versions)
Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This pr…
Check whether accesscontrol is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for accesscontrol CVEs against the assets you own.
Start Free Scan →