Products Pluggableauthservice

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-21337 PyPI MEDIUM POC PATCH This Month

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Open Redirect Products Pluggableauthservice

NVD GitHub Exploit-DB

CVSS 3.1

6.1

EPSS

8.4%

CVE-2021-21336 PyPI MEDIUM PATCH This Month

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Products Pluggableauthservice Plone

NVD GitHub

CVSS 3.1

6.5

EPSS

1.5%

CVE-2021-21337 PyPI

EPSS 8% CVSS 6.1

MEDIUM POC PATCH This Month

Open Redirect Products Pluggableauthservice

NVD GitHub Exploit-DB

CVE-2021-21336 PyPI

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Products Pluggableauthservice Plone

NVD GitHub