{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35749?format=json","vulnerability_id":"VCID-ch23-b7u4-u3g4","summary":"Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. The problem has been fixed in version 2.1.1. Depending on how you have installed Products.GenericSetup, you should change the buildout version pin to 2.1.1 and re-run the buildout, or if you used pip simply do pip install `\"Products.GenericSetup>=2.1.1\"`.","aliases":[{"alias":"CVE-2021-21360"},{"alias":"GHSA-jff3-mwp3-f8cw"},{"alias":"PYSEC-2021-43"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/20323?format=json","purl":"pkg:pypi/products-genericsetup@2.1.1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.1.1"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/20265?format=json","purl":"pkg:pypi/products-genericsetup@1.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/20266?format=json","purl":"pkg:pypi/products-genericsetup@1.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/20267?format=json","purl":"pkg:pypi/products-genericsetup@1.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.3.4"},{"url":"http://public2.vulnerablecode.io/api/packages/20268?format=json","purl":"pkg:pypi/products-genericsetup@1.4.0b0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.4.0b0"},{"url":"http://public2.vulnerablecode.io/api/packages/20269?format=json","purl":"pkg:pypi/products-genericsetup@1.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/20270?format=json","purl":"pkg:pypi/products-genericsetup@1.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/20271?format=json","purl":"pkg:pypi/products-genericsetup@1.4.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.4.2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/20272?format=json","purl":"pkg:pypi/products-genericsetup@1.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.4.3"},{"url":"http://public2.vulnerablecode.io/api/packages/20273?format=json","purl":"pkg:pypi/products-genericsetup@1.4.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.4.4"},{"url":"http://public2.vulnerablecode.io/api/packages/20274?format=json","purl":"pkg:pypi/products-genericsetup@1.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.4.5"},{"url":"http://public2.vulnerablecode.io/api/packages/20275?format=json","purl":"pkg:pypi/products-genericsetup@1.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.4.6"},{"url":"http://public2.vulnerablecode.io/api/packages/20276?format=json","purl":"pkg:pypi/products-genericsetup@1.5.0b1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.5.0b1"},{"url":"http://public2.vulnerablecode.io/api/packages/20277?format=json","purl":"pkg:pypi/products-genericsetup@1.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/20278?format=json","purl":"pkg:pypi/products-genericsetup@1.6.0b1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.0b1"},{"url":"http://public2.vulnerablecode.io/api/packages/20279?format=json","purl":"pkg:pypi/products-genericsetup@1.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/20280?format=json","purl":"pkg:pypi/products-genericsetup@1.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/20281?format=json","purl":"pkg:pypi/products-genericsetup@1.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.2"},{"url":"http://public2.vulnerablecode.io/api/packages/20282?format=json","purl":"pkg:pypi/products-genericsetup@1.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/20283?format=json","purl":"pkg:pypi/products-genericsetup@1.6.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.4"},{"url":"http://public2.vulnerablecode.io/api/packages/20284?format=json","purl":"pkg:pypi/products-genericsetup@1.6.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.5"},{"url":"http://public2.vulnerablecode.io/api/packages/20285?format=json","purl":"pkg:pypi/products-genericsetup@1.6.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.6"},{"url":"http://public2.vulnerablecode.io/api/packages/20286?format=json","purl":"pkg:pypi/products-genericsetup@1.6.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.7"},{"url":"http://public2.vulnerablecode.io/api/packages/20287?format=json","purl":"pkg:pypi/products-genericsetup@1.6.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.8"},{"url":"http://public2.vulnerablecode.io/api/packages/20288?format=json","purl":"pkg:pypi/products-genericsetup@1.6.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.6.9"},{"url":"http://public2.vulnerablecode.io/api/packages/20289?format=json","purl":"pkg:pypi/products-genericsetup@1.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/20290?format=json","purl":"pkg:pypi/products-genericsetup@1.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/20291?format=json","purl":"pkg:pypi/products-genericsetup@1.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/20292?format=json","purl":"pkg:pypi/products-genericsetup@1.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/20293?format=json","purl":"pkg:pypi/products-genericsetup@1.7.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.7.4"},{"url":"http://public2.vulnerablecode.io/api/packages/20294?format=json","purl":"pkg:pypi/products-genericsetup@1.7.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.7.5"},{"url":"http://public2.vulnerablecode.io/api/packages/20295?format=json","purl":"pkg:pypi/products-genericsetup@1.7.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.7.6"},{"url":"http://public2.vulnerablecode.io/api/packages/20296?format=json","purl":"pkg:pypi/products-genericsetup@1.7.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.7.7"},{"url":"http://public2.vulnerablecode.io/api/packages/20297?format=json","purl":"pkg:pypi/products-genericsetup@1.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/20298?format=json","purl":"pkg:pypi/products-genericsetup@1.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.1"},{"url":"http://public2.vulnerablecode.io/api/packages/20299?format=json","purl":"pkg:pypi/products-genericsetup@1.8.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.2"},{"url":"http://public2.vulnerablecode.io/api/packages/20300?format=json","purl":"pkg:pypi/products-genericsetup@1.8.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.3"},{"url":"http://public2.vulnerablecode.io/api/packages/20301?format=json","purl":"pkg:pypi/products-genericsetup@1.8.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.4"},{"url":"http://public2.vulnerablecode.io/api/packages/20302?format=json","purl":"pkg:pypi/products-genericsetup@1.8.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.5"},{"url":"http://public2.vulnerablecode.io/api/packages/20303?format=json","purl":"pkg:pypi/products-genericsetup@1.8.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.6"},{"url":"http://public2.vulnerablecode.io/api/packages/20304?format=json","purl":"pkg:pypi/products-genericsetup@1.8.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.7"},{"url":"http://public2.vulnerablecode.io/api/packages/20305?format=json","purl":"pkg:pypi/products-genericsetup@1.8.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.8"},{"url":"http://public2.vulnerablecode.io/api/packages/20306?format=json","purl":"pkg:pypi/products-genericsetup@1.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/20307?format=json","purl":"pkg:pypi/products-genericsetup@1.8.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.10"},{"url":"http://public2.vulnerablecode.io/api/packages/20308?format=json","purl":"pkg:pypi/products-genericsetup@1.8.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.8.11"},{"url":"http://public2.vulnerablecode.io/api/packages/20309?format=json","purl":"pkg:pypi/products-genericsetup@1.9.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.9.0"},{"url":"http://public2.vulnerablecode.io/api/packages/20310?format=json","purl":"pkg:pypi/products-genericsetup@1.9.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.9.1"},{"url":"http://public2.vulnerablecode.io/api/packages/20311?format=json","purl":"pkg:pypi/products-genericsetup@1.10.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@1.10.0"},{"url":"http://public2.vulnerablecode.io/api/packages/20312?format=json","purl":"pkg:pypi/products-genericsetup@2.0b1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0b1"},{"url":"http://public2.vulnerablecode.io/api/packages/20313?format=json","purl":"pkg:pypi/products-genericsetup@2.0b2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0b2"},{"url":"http://public2.vulnerablecode.io/api/packages/20314?format=json","purl":"pkg:pypi/products-genericsetup@2.0b3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0b3"},{"url":"http://public2.vulnerablecode.io/api/packages/20315?format=json","purl":"pkg:pypi/products-genericsetup@2.0b4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0b4"},{"url":"http://public2.vulnerablecode.io/api/packages/20316?format=json","purl":"pkg:pypi/products-genericsetup@2.0b5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0b5"},{"url":"http://public2.vulnerablecode.io/api/packages/20317?format=json","purl":"pkg:pypi/products-genericsetup@2.0b6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0b6"},{"url":"http://public2.vulnerablecode.io/api/packages/20318?format=json","purl":"pkg:pypi/products-genericsetup@2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/20319?format=json","purl":"pkg:pypi/products-genericsetup@2.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/20320?format=json","purl":"pkg:pypi/products-genericsetup@2.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/20321?format=json","purl":"pkg:pypi/products-genericsetup@2.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/20322?format=json","purl":"pkg:pypi/products-genericsetup@2.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ch23-b7u4-u3g4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/products-genericsetup@2.1.0"}],"references":[{"reference_url":"https://github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57"},{"reference_url":"https://github.com/zopefoundation/Products.GenericSetup/security/advisories/GHSA-jff3-mwp3-f8cw","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/zopefoundation/Products.GenericSetup/security/advisories/GHSA-jff3-mwp3-f8cw"},{"reference_url":"https://pypi.org/project/Products.GenericSetup/","reference_id":"","reference_type":"","scores":[],"url":"https://pypi.org/project/Products.GenericSetup/"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ch23-b7u4-u3g4"}