Description

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Remediation

References

CVE-2001-1227

Related Vulnerabilities

Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-4034)

Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-21147)

Dolibarr Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-31019)

Oracle Application Server Other Vulnerability (CVE-2002-1632)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-3638)

Severity

High

Classification

CVE-2001-1227

Tags

Missing Update Known Vulnerabilities