CVE-2002-0688

Description

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

How to fix CVE-2002-0688

To remediate CVE-2002-0688, upgrade the affected package to a fixed version below.

• PyPI/zope—upgrade to 2.6.0 or later
• PyPI/zope—upgrade to 2.6.0 or later

Is CVE-2002-0688 being exploited?

Low — EPSS is 1.4%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• >= 2.4.0, < 2.6.0
• >= 2.4.0, < 2.6.0

References (8)

• ADVISORYgithub.com/advisories/GHSA-7944-h5rw-qmjx
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2002-0688
• PATCHpypi.org/project/zope
• WEBweb.archive.org/web/20020810160608/http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert