PYSEC-2026-1067
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/zope2/PYSEC-2026-1067.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-1067
- Aliases
-
- CVE-2011-3587
- GHSA-8w48-m6hx-rjw2
- Published
- 2026-07-06T08:03:27.453449Z
- Modified
- 2026-07-07T11:45:36.920153778Z
- Summary
- Zope Command Execution Vulnerability
- Details
-
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the
p_class inOFS/misc_.pyand the use of Python modules. - References
-
- https://nvd.nist.gov/vuln/detail/CVE-2011-3587
- https://github.com/zopefoundation/Zope/commit/491a583d8c6622b80c75917e5017c4bb4b15e477
- https://github.com/zopefoundation/Zope/commit/6bb2fb3c04a76b00bec9bd7c069733e06fa6ebe9
- https://bugzilla.redhat.com/show_bug.cgi?id=742297
- https://github.com/pypa/advisory-database/tree/main/vulns/products-plonehotfix20110928/PYSEC-2011-26.yaml
- https://github.com/zopefoundation/Zope
- https://web.archive.org/web/20111013043934/http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
- http://plone.org/products/plone-hotfix/releases/20110928
- http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip
- http://plone.org/products/plone/security/advisories/20110928
- http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0
- http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
- https://pypi.org/project/zope2
- https://github.com/advisories/GHSA-8w48-m6hx-rjw2
Affected packages
PyPI / zope2
Package
- Name
- zope2
- View open source insights on deps.dev
- Purl
- pkg:pypi/zope2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced2.12.0Fixed2.12.20Introduced2.13.0Fixed2.13.10