CVE-2021-32633

CVE-2021-32633 is a high-severity vulnerability in Zope versions prior to 4.6 and 5.2, affecting products like Plone and Zope itself. It allows authenticated users with Zope Page Template editing privileges to indirectly access untrusted Python modules, potentially leading to remote code execution. The CVSS score of 8.8 indicates a high impact on confidentiality, integrity, and availability, with low attack complexity and requiring only low privileges. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), a Reddit write-up discusses authenticated RCE, suggesting community awareness and potential for future exploitation.