Medium severity5.3NVD Advisory· Published Mar 9, 2021· Updated Jun 17, 2026
CVE-2021-21360
CVE-2021-21360
Description
Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. The problem has been fixed in version 2.1.1. Depending on how you have installed Products.GenericSetup, you should change the buildout version pin to 2.1.1 and re-run the buildout, or if you used pip simply do pip install "Products.GenericSetup>=2.1.1".
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
Products.GenericSetupPyPI | < 2.1.1 | 2.1.1 |
Affected products
3- zopefoundation/Products.GenericSetupv5Range: < 2.1.1
Patches
Vulnerability mechanics
References
9- github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-jff3-mwp3-f8cwghsaADVISORY
- github.com/zopefoundation/Products.GenericSetup/security/advisories/GHSA-jff3-mwp3-f8cwnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-21360ghsaADVISORY
- pypi.org/project/Products.GenericSetup/nvdProductThird Party Advisory
- www.openwall.com/lists/oss-security/2021/05/21/1nvdMailing ListWEB
- www.openwall.com/lists/oss-security/2021/05/22/1nvdMailing ListWEB
- github.com/pypa/advisory-database/tree/main/vulns/products-genericsetup/PYSEC-2021-43.yamlghsaWEB
- pypi.org/project/Products.GenericSetupghsaWEB
News mentions
0No linked articles in our index yet.