GHSA-h2xh-jvpf-xq42High

Zope does not properly perform security registration for legacy names

Published
April 30, 2022
Last Modified
September 18, 2023

🔗 CVE IDs covered (1)

CVE-2000-1211 →

📋 Description

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

🎯 Affected products1

  • pip/zope:>= 2.2.0, <= 2.2.4

🔗 References (6)