Products Pluggableauthservice

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-21337 Mar 08, 21:15 PyPI MEDIUM POC PATCH This Month

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Open Redirect Zope Products Pluggableauthservice

NVD GitHub Exploit-DB

CVSS 3.1

6.1

EPSS

8.4%

CVE-2021-21336 Mar 08, 21:15 PyPI MEDIUM PATCH This Month

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Zope Plone Products Pluggableauthservice

NVD GitHub

CVSS 3.1

6.5

EPSS

1.5%

CVE-2021-21337 PyPI

EPSS 8% CVSS 6.1

MEDIUM POC PATCH This Month

Open Redirect Zope Products Pluggableauthservice

NVD GitHub Exploit-DB

CVE-2021-21336 PyPI

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Zope Plone +1

NVD GitHub