docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Zope | Zope | 2.7.0 (including) | 2.7.8 (excluding) |
| Zope | Zope | 2.8.0 (including) | 2.8.2 (excluding) |
| Zope | Zope | 2.6 (including) | 2.6 (including) |