Description
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Remediation
References
Related Vulnerabilities
Plone CMS CVE-2011-3587 Vulnerability (CVE-2011-3587)
SharePoint CVE-2020-1505 Vulnerability (CVE-2020-1505)
Perl Use of Externally-Controlled Format String Vulnerability (CVE-2012-1151)
Liferay Portal Other Vulnerability (CVE-2024-26270)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3370)