CVE-2002-0170
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zope:zope
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-c3rp-4cjh-cp38 | PyPI | zope | >=2.2.0 <2.4.4 | 2.4.4 |
| GHSA-c3rp-4cjh-cp38 | PyPI | zope | >=2.5.0 <2.5.1 | 2.5.1 |
| PYSEC-2026-758 | PyPI | zope | >=2.2.0 <2.4.4 >=2.5.0 <2.5.1 | 2.4.4, 2.5.1 |