Description

The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.

Remediation

References

CVE-2002-0687

Related Vulnerabilities

Zikula Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2016-9835)

Internet Information Services Other Vulnerability (CVE-2000-0951)

Piwigo Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2025-62406)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-40603)

React Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)

Severity

Medium

Classification

CVE-2002-0687

Tags

Missing Update Known Vulnerabilities