CVEvulnerability

CVE-2000-1212

5.0 MEDIUM Published 2000-12-18 Modified 2026-09-23 Official page ↗
Status
Modified
Published
2000-12-18
Last modified
2026-09-23
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

Affected configurations

• zope zope 2.2.0 • zope zope 2.2.0a1 • zope zope 2.2.0b1 • zope zope 2.2.0b2 • zope zope 2.2.0b3 • zope zope 2.2.0b4 • zope zope 2.2.1 • zope zope 2.2.1b1 • zope zope 2.2.2 • zope zope 2.2.3 • zope zope 2.2.4

Related

Referenced by CWE · observed example (1)

  • CWE-267 Privilege Defined With Unsafe Actions weakness

References