PYSEC-2017-148
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/zope/PYSEC-2017-148.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2017-148
- Withdrawn
- 2024-11-22T04:37:05Z
- Published
- 2017-08-07T17:29:00Z
- Modified
- 2025-10-09T05:28:01Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12.
- References
-
- https://security-tracker.debian.org/tracker/CVE-2009-5145/
- https://github.com/zopefoundation/Zope/commit/2abdf14620f146857dc8e3ffd2b6a754884c331d
- https://bugs.launchpad.net/zope2/+bug/490514
- http://www.securityfocus.com/bid/72792/info
- http://www.openwall.com/lists/oss-security/2015/03/02/7
- http://cve.killedkenny.io/cve/CVE-2009-5145
Affected packages
PyPI / zope
Package
- Name
- zope
- View open source insights on deps.dev
- Purl
- pkg:pypi/zope
Affected ranges
- Type
- GIT
- Repo
- https://github.com/zopefoundation/Zope
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
4.*
4.0b1
4.0b2
4.0b3
4.0b4
4.0b5
4.0b6
4.0b7
4.0b8
4.0b9
4.0b10
4.0
4.1
4.1.1
4.1.2
4.1.3
4.2
4.2.1
4.3
4.4
4.4.1
4.4.2
4.4.3
4.4.4
4.5
4.5.1
4.5.2
4.5.3
4.5.4
4.5.5
4.6
4.6.1
4.6.2
4.6.3
4.7
4.8
4.8.1
4.8.2
4.8.3
4.8.4
4.8.5
4.8.6
4.8.7
4.8.8
4.8.9
4.8.10
4.8.11
5.*
5.0a1
5.0a2
5.0
5.1
5.1.1
5.1.2
5.2
5.2.1
5.3
5.4
5.5
5.5.1
5.5.2
5.6
5.7
5.7.1
5.7.2
5.7.3
5.8
5.8.1
5.8.2
5.8.3
5.8.4
5.8.5
5.8.6
5.9
5.10
5.11
5.11.1
5.12
5.13