CVE-2008-5102: Zope

Medium severity, CVSS 4.0. EPSS: 3.9% chance of exploitation in the next 30 days.

PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.

Affected products

• Zope Zope: up to and including 2.11.2; version 1.10.3 only; version 1.10.4 only; version 2.0.0 only; version 2.0.0a4 only; version 2.0.0b4 only; …

Published 2008-11-17. Last modified 2026-06-16.