GHSA-7whr-j8vf-r4wjMedium

Zope allows attackers to modify raw image and file data

Published
April 30, 2022
Last Modified
September 18, 2023

🔗 CVE IDs covered (1)

CVE-2000-1212 →

📋 Description

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

🎯 Affected products1

  • pip/zope:>= 2.2.0, <= 2.2.4

🔗 References (7)