Executive brief
Information disclosure in AccessControl
Affected products
- PyPI AccessControl
- PyPI Zope
Junglewise Threat Intelligence
CVE-2023-41050: PYSEC-2026-2325 - Information disclosure in AccessControl
CVE-2023-41050 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: AccessControl (PyPI), Zope (PyPI). Vendors: PyPI.
Related threats
- Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create an
- PYSEC-2026-2326 - Access control vulnerable to user data deletion by anonynmous users
- PYSEC-2026-2077 - Zope vulnerable to Stored Cross Site Scripting with SVG images
- PYSEC-2026-760 - Zope DocumentTemplate package allows unauthenticated write
- PYSEC-2026-761 - Zope Server vulnerable to DoS via header injection