{"id":"PYSEC-2026-1067","summary":"Zope Command Execution Vulnerability","details":"Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the `p_` class in `OFS/misc_.py` and the use of Python modules.","aliases":["CVE-2011-3587","GHSA-8w48-m6hx-rjw2"],"modified":"2026-07-07T11:45:36.920153778Z","published":"2026-07-06T08:03:27.453449Z","references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3587"},{"type":"WEB","url":"https://github.com/zopefoundation/Zope/commit/491a583d8c6622b80c75917e5017c4bb4b15e477"},{"type":"WEB","url":"https://github.com/zopefoundation/Zope/commit/6bb2fb3c04a76b00bec9bd7c069733e06fa6ebe9"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=742297"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/products-plonehotfix20110928/PYSEC-2011-26.yaml"},{"type":"PACKAGE","url":"https://github.com/zopefoundation/Zope"},{"type":"WEB","url":"https://web.archive.org/web/20111013043934/http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587"},{"type":"WEB","url":"http://plone.org/products/plone-hotfix/releases/20110928"},{"type":"WEB","url":"http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip"},{"type":"WEB","url":"http://plone.org/products/plone/security/advisories/20110928"},{"type":"WEB","url":"http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0"},{"type":"WEB","url":"http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587"},{"type":"PACKAGE","url":"https://pypi.org/project/zope2"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-8w48-m6hx-rjw2"}],"affected":[{"package":{"name":"zope2","ecosystem":"PyPI","purl":"pkg:pypi/zope2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.0"},{"fixed":"2.12.20"},{"introduced":"2.13.0"},{"fixed":"2.13.10"}]}],"versions":["2.12.0","2.12.1","2.12.10","2.12.11","2.12.12","2.12.13","2.12.14","2.12.15","2.12.16","2.12.17","2.12.18","2.12.19","2.12.2","2.12.3","2.12.4","2.12.5","2.12.6","2.12.7","2.12.8","2.12.9","2.13.0","2.13.1","2.13.2","2.13.3","2.13.4","2.13.5","2.13.6","2.13.7","2.13.8","2.13.9"],"database_specific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/zope2/PYSEC-2026-1067.yaml"}}],"schema_version":"1.7.5"}