Description

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Remediation

References

CVE-2001-1278

Related Vulnerabilities

PHP Other Vulnerability (CVE-2016-4541)

MySQL CVE-2020-2804 Vulnerability (CVE-2020-2804)

Internet Information Services Other Vulnerability (CVE-2000-0631)

WordPress Plugin wordpress vertical image slider Multiple Vulnerabilities (1.0)

WordPress Plugin NewStatPress Cross-Site Scripting (1.0.5)

Severity

High

Classification

CVE-2001-1278

Tags

Missing Update Known Vulnerabilities