Description

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

Remediation

References

CVE-2000-1211

Related Vulnerabilities

PHP Other Vulnerability (CVE-2005-3388)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42048)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.3)

Drupal Core 8.x Security Bypass (8.0.0 - 8.1.6)

WordPress Plugin Contact Form, Drag and Drop Form Builder for WordPress-Everest Forms SQL Injection (1.4.9)

Severity

High

Classification

CVE-2000-1211

Tags

Missing Update Known Vulnerabilities