GitHub Advisoryadvisory · PyPI

GHSA-h2xh-jvpf-xq42 Zope does not properly perform security registration for legacy names

HIGH Published 2022-04-30 Modified 2023-09-18 Official page ↗
Aliases
CVE-2000-1211
Ecosystem
PyPI
Packages
zope
Severity
High
Weaknesses
CWE-287
Reviewed
2023-09-18

Affected packages

• PyPI zope: >= 2.2.0, <= 2.2.4 (no fix yet)

Description

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

Related

Alias · CVE (1)

  • CVE-2000-1211 Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References