Description

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

Remediation

References

CVE-2000-1211

Related Vulnerabilities

phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-15072)

Chamilo Session Fixation Vulnerability (CVE-2026-31940)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9479)

WordPress Plugin Bad Behavior Multiple Cross-Site Scripting Vulnerabilities (2.2.4)

Craft CMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-29113)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2000-1211