GitHub Advisoryadvisory · PyPI

GHSA-7whr-j8vf-r4wj Zope allows attackers to modify raw image and file data

MEDIUM Published 2022-04-30 Modified 2023-09-18 Official page ↗
Aliases
CVE-2000-1212
Ecosystem
PyPI
Packages
zope
Severity
Moderate
Weaknesses
CWE-284
Reviewed
2023-09-18

Affected packages

• PyPI zope: >= 2.2.0, <= 2.2.4 (no fix yet)

Description

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

Related

Alias · CVE (1)

  • CVE-2000-1212 Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML… vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References