CVE-2024-51734 - Zope AccessControl Lateral File Traversal Vulnerability

CVE ID : CVE-2024-51734
Published : Nov. 4, 2024, 11:15 p.m. | 24 minutes ago
Description : Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This problem has been fixed in version 7.2. Users are advised to upgrade. Users unable to upgrade may address the issue by adding `data__roles__ = ()` to `AccessControl.userfolder.UserFolder`.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...