GitHub Advisoryadvisory · PyPI

GHSA-wcwp-r3fj-mm3p Zope DTML implementation Improper Authentication

HIGH Published 2022-04-30 Modified 2023-09-18 Official page ↗

Aliases: CVE-2000-0062
Ecosystem: PyPI
Packages: zope
Severity: High
Weaknesses: CWE-287
Reviewed: 2023-09-18

Affected packages

• PyPI zope: >= 2.2.0, <= 2.2.4 (no fix yet)

Description

The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.

Related

Alias · CVE (1)

CVE-2000-0062 The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities. vulnerability

Weakness · CWE (1)

CWE-287 Improper Authentication weakness

References