CVE-2024-51734
EUVD-2024-325004.11.2024, 23:15
Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This problem has been fixed in version 7.2. Users are advised to upgrade. Users unable to upgrade may address the issue by adding `data__roles__ = ()` to `AccessControl.userfolder.UserFolder`.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| zope | accesscontrol | 𝑥 < 7.2 | ADP |
| zope | accesscontrol | 𝑥 < 5.11.1 | ADP |
Common Weakness Enumeration