CVE-2002-0687
The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zope:zope
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-vwrc-g9q6-f675 | PyPI | zope | >=2.0.0 <2.4.4b2 | 2.4.4b2 |
| GHSA-vwrc-g9q6-f675 | PyPI | zope | >=2.5.0 <2.5.1b2 | 2.5.1b2 |
| PYSEC-2026-761 | PyPI | zope | >=2.0.0 <2.4.4b2 >=2.5.0 <2.5.1b2 | 2.4.4b2, 2.5.1b2 |