Description

The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.

Remediation

References

CVE-2006-4684

Related Vulnerabilities

MongoDb Reachable Assertion Vulnerability (CVE-2021-32037)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7341)

Oracle Database Server CVE-2019-2776 Vulnerability (CVE-2019-2776)

DOMPurify URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-25155)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3190)

Severity

Medium

Classification

CVE-2006-4684

Tags

Missing Update Known Vulnerabilities