Secunia

Multiple vulnerabilities have been reported in Zope, which can be exploited by malicious users to cause a DoS (Denial of Service), conduct cross-site scripting attacks or disclose various information.

The vulnerabilities are caused due to input validation errors, access control errors, and other insufficient security restrictions. This can be exploited to access certain protected resources, include HTML or script code in HTTP requests, or crash an affected system.

See links in the "Original Advisory" section for detailed information.

The vulnerabilities affect versions prior to 2.6.3 in the 2.6.x branch and versions prior to 2.7.0 beta 4 in the 2.7 branch.

Solution
Update to version 2.6.3 or 2.7.0 beta 4.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Original Advisory
http://mail.zope.org/pipermail/zope-announce/2004-January/001325.html
http://mail.zope.org/pipermail/zope-announce/2004-January/001326.html

Deep Links
Links available in Customer Area