CVE-2006-4684: Zope allows remote attackers to read arbitrary files

The vulnerability stems from Zope's integration of docutils' reST parser, which included the csv_table directive. This directive allows embedding CSV files via the 'file' parameter. Zope's implementation failed to restrict file path access, letting attackers traverse directories. The high-confidence entry points to docutils' CSVTable.run method, which executes the file read operation. The medium-confidence entry reflects Zope's failure to disable/sanitize this directive in its ReST processing layer, though the exact Zope-side function isn't explicitly named in available sources. The fix involved disabling the directive entirely, confirming its role in the exploit.