—

PYSEC-2009-10

상세

Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / zodb3

최초 영향 버전: 3.8 수정 버전: 3.8.3

수정 pip install --upgrade 'zodb3>=3.8.3'

참고

https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html [WEB]
http://pypi.python.org/pypi/ZODB3/3.9.0c2 [WEB]
http://pypi.python.org/pypi/ZODB3/3.8.3 [WEB]
http://www.vupen.com/english/advisories/2009/2534 [ADVISORY]
https://github.com/advisories/GHSA-m52m-2qpx-9j4j [ADVISORY]