Description

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

Remediation

References

CVE-2000-1211

Related Vulnerabilities

WeBid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-7116)

Oracle Database Server CVE-2014-6455 Vulnerability (CVE-2014-6455)

WordPress Plugin Shopping Cart & eCommerce Store Unspecified Vulnerability (3.1.9)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0923)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1183)

Severity

High

Classification

CVE-2000-1211

Tags

Missing Update Known Vulnerabilities