> CVE-2024-51734

« BACK_TO_HOME
PUBLISHED
2024-11-04 23:15
MODIFIED
2025-01-22 20:15
EPSS (Prob. Exploit)
0.43%
Top 63.3%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-11

> DESCRIPTION

Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This problem has been fixed in version 7.2. Users are advised to upgrade. Users unable to upgrade may address the issue by adding `data__roles__ = ()` to `AccessControl.userfolder.UserFolder`.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-g5vw-3h65-2q3v MODERATE

Access control vulnerable to user data deletion by anonynmous users

AFFECTED PACKAGES:
PIP / Zope
< 5.11.1
Fixed in: 5.11.1
PIP / AccessControl
< 7.2
Fixed in: 7.2

> HISTORIQUE DES MODIFICATIONS

Première apparition
04/11/2024 23:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:56
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME