Products.CMFCore vulnerabilities

1 known vulnerability in Products.CMFCore from Zopefoundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Products.CMFCore: Allocation of Resources Without Limits or Throttling

  CVE-2023-36814Jul 3, 2023Zopefoundation

  Products.CMFCore are the key framework services for the Zope Content Management Framework (CMF). The use of Python's marshal module to handle unchecked input in a public method on `PortalFolder` objects can lead to an unauthenticated denial of service and cras