Description

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Remediation

References

CVE-2001-1278

Related Vulnerabilities

WordPress Plugin WP Social Sharing Cross-Site Scripting (2.2)

TYPO3 Improper Input Validation Vulnerability (CVE-2009-0258)

OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3566)

Liferay Portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-42123)

PHP Configuration Vulnerability (CVE-2008-5844)

Severity

High

Classification

CVE-2001-1278

Tags

Missing Update Known Vulnerabilities