Description
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
Remediation
References
Related Vulnerabilities
WordPress Plugin Powerplay Gallery Multiple Vulnerabilities (3.3)
MySQL CVE-2013-5891 Vulnerability (CVE-2013-5891)
WordPress Plugin Stockists Manager for Woocommerce Cross-Site Request Forgery (1.0.2.1)
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37149)
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9751)