Security Advisory

CVE-2024-51734

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-11-04 22:25:22

Last updated 2025-01-22 20:12:19

Assigner GitHub_M

State PUBLISHED

Description

Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This problem has been fixed in version 7.2. Users are advised to upgrade. Users unable to upgrade may address the issue by adding `data__roles__ = ()` to `AccessControl.userfolder.UserFolder`.

← Browse all CVEs View on cve.org ↗