Description

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

Remediation

References

CVE-2000-1211

Related Vulnerabilities

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20102)

Moodle CVE-2024-25979 Vulnerability (CVE-2024-25979)

Atlassian Jira Missing Authentication for Critical Function Vulnerability (CVE-2019-8449)

WordPress Plugin LearnPress-WordPress LMS Cross-Site Scripting (4.1.6.5)

XWikiplatform Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2024-31464)

Severity

High

Classification

CVE-2000-1211

Tags

Missing Update Known Vulnerabilities